Vendor
Microsoft
14,257 known vulnerabilities.
Products
3,075 results · Clear filters · Feed
-
Medium 5.5
Windows State Repository Service Tampering Vulnerability
Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Deployment Services Information Disclosure Vulnerability
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Print Spooler Components Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Composite Image File System Information Disclosure Vulnerability
Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Print Spooler Components Information Disclosure Vulnerability
Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.
-
Medium 5.5
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Security Account Manager Denial of Service Vulnerability
Untrusted pointer dereference in Windows Security Account Manager allows an authorized attacker to deny service over a network.
-
Medium 4.7
Windows Installer Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 6.0
Windows Secure Kernel Mode Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows RNDIS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Microsoft Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
Medium 6.5
Azure CycleCloud Elevation of Privilege Vulnerability
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 5.3
Windows DNS Denial of Service Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 5.9
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Secondary Logon Information Disclosure Vulnerability
Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Broker Infrastructure Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows OLE Information Disclosure Vulnerability
Use after free in Windows OLE allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Internet (wininet.dll) Information Disclosure Vulnerability
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows WLAN Service Denial of Service Vulnerability
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 5.5
Windows USB Hub Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.
-
Medium 5.6
Windows Text Services Framework Information Disclosure Vulnerability
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
-
Medium 4.9
Role: DNS Server Denial of Service Vulnerability
Use after free in DNS Server allows an authorized attacker to deny service over a network.
-
Medium 6.7
Windows Hyper-V Security Feature Bypass Vulnerability
Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.