Platform
Windows
10,645 known vulnerabilities.
2,425 results · Clear filters · Feed
-
Medium 6.7
Windows Installer Elevation of Privilege Vulnerability
Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Message Queuing Denial of Service Vulnerability
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.
-
Medium 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Graphics Kernel Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Management Services Information Disclosure Vulnerability
Use after free in Windows Management Services allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows BitLocker Security Feature Bypass Vulnerability
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.
-
Medium 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 5.9
Windows Client for NFS Security Feature Bypass Vulnerability
Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.0
Storport.sys Driver Information Disclosure Vulnerability
Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.
-
Medium 6.5
Windows Remote Access API Tampering Vulnerability
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
-
Medium 4.7
Windows Hyper-V Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.3
Windows Hyper-V Spoofing Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
-
Medium 5.5
Windows Network File System Information Disclosure Vulnerability
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Advanced Rasterization Platform Information Disclosure Vulnerability
Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Server for NFS Information Disclosure Vulnerability
Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
Medium 4.7
Windows WinHTTP Information Disclosure Vulnerability
Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Windows Active Directory Denial of Service Vulnerability
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
Medium 4.3
Windows Smart Card Information Disclosure Vulnerability
Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vu…
-
Medium 5.5
Mailslot File System Information Disclosure Vulnerability
Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows System Events Broker Information Disclosure Vulnerability
Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.
-
Medium 5.0
Windows Shell Information Disclosure Vulnerability
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.