Platform
Windows
10,645 known vulnerabilities.
2,425 results · Clear filters · Feed
-
Medium 5.5
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Hello Information Disclosure Vulnerability
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
-
Medium 5.5
Windows DHCP Server Security Feature Bypass Vulnerability
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
-
Medium 6.8
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Microsoft Bluetooth Driver Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Servicing Stack Updates Information Disclosure Vulnerability
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
-
Medium 5.5
HTTP.sys Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 6.5
Windows Hyper-V Information Disclosure Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Error Reporting Information Disclosure Vulnerability
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Modern Device Management (MDM) Tampering Vulnerability
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
-
Medium 4.8
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
RPC Runtime Information Disclosure Vulnerability
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows SmartScreen Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
-
Medium 6.1
Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
-
Medium 5.5
Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Desktop Window Manager Information Disclosure Vulnerability
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows DNS Denial of Service Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows DNS Remote Code Execution Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.