1,519 results · Clear filters · Feed
-
Medium 6.4
Windows Failover Cluster Elevation of Privilege Vulnerability
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.4
Windows Management Instrumentation Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Spaceport.sys Information Disclosure Vulnerability
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows iSCSI Target Service Denial of Service Vulnerability
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.6
Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
-
Medium 5.7
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Error Reporting Information Disclosure Vulnerability
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Search Component Tampering Vulnerability
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
-
Medium 5.7
Windows SMB Client Information Disclosure Vulnerability
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
-
Medium 5.7
Windows Print Spooler Components Information Disclosure Vulnerability
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows USB Mass Storage Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Speech Tampering Vulnerability
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
-
Medium 6.8
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows USB Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
-
Medium 5.7
Windows Management Instrumentation Information Disclosure Vulnerability
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
-
Medium 5.5
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
-
Medium 6.5
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
Windows DNS Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
-
Medium 6.7
Windows DNS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
-
Medium 6.7
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
-
Medium 6.7
Windows DNS Elevation of Privilege Vulnerability
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows SMB Client Information Disclosure Vulnerability
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.