Vendor
Microsoft
14,257 known vulnerabilities.
Products
3,075 results · Clear filters · Feed
-
Medium 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Microsoft Authentication Library for JavaScript Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Windows Active Directory Denial of Service Vulnerability
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
Medium 4.3
Windows Smart Card Information Disclosure Vulnerability
Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vu…
-
Medium 5.5
Mailslot File System Information Disclosure Vulnerability
Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows System Events Broker Information Disclosure Vulnerability
Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.
-
Medium 5.0
Windows Shell Information Disclosure Vulnerability
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.
-
Medium 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability
Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
-
Medium 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Telephony Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 6.5
ASP.NET Core Security Feature Bypass Vulnerability
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
ASP.NET Core Information Disclosure Vulnerability
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
Medium 6.4
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows NTFS Tampering Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 4.7
Windows Container Manager Service Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.
-
Medium 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Devices Human Interface Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.
-
Medium 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows DHCP Server Spoofing Vulnerability
Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 5.5
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
-
Medium 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Projected File System Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.