107,290 results · Clear filters · Feed
-
Medium 5.5
Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
-
Medium 5.6
Windows Secure Kernel Mode Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Modern Device Management (MDM) Tampering Vulnerability
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Projected File System Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows USB Print Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Audio Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Overlay Filter Tampering Vulnerability
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Network List Service Tampering Vulnerability
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Update Stack Tampering Vulnerability
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Azure Arc Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
Medium 6.7
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
.NET Framework Security Feature Bypass Vulnerability
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.2
Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.