1,207 results · Clear filters · Feed
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Desktop Window Manager Information Disclosure Vulnerability
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Netlogon Information Disclosure Vulnerability
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Windows Secure Kernel Mode Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Netlogon Denial of Service Vulnerability
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
-
Medium 5.5
Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
-
Medium 6.5
Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
-
Medium 4.7
Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
-
Medium 5.6
Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
-
Medium 4.7
Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.8
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows AppX Deployment Service Tampering Vulnerability
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 4.6
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
-
Medium 4.3
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows CD-ROM Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
-
Medium 4.6
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
-
Medium 4.3
Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
-
Medium 6.5
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Autopilot Tampering Vulnerability
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Biometric Service Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows USB Hub Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 4.3
Windows URL Moniker Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.8
Volume Shadow Copy Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.