1,207 results · Clear filters · Feed
-
Medium 6.5
Microsoft PowerShell Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows Performance Monitor Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Projected File System Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Hyper-V Denial of Service Vulnerability
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 5.5
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Clipboard User Service Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Hello Information Disclosure Vulnerability
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
-
Medium 6.8
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Microsoft Bluetooth Driver Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Servicing Stack Updates Information Disclosure Vulnerability
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
-
Medium 5.5
HTTP.sys Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 6.5
Windows Hyper-V Information Disclosure Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Error Reporting Information Disclosure Vulnerability
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
-
Medium 6.5
RPC Runtime Information Disclosure Vulnerability
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
-
Medium 6.1
Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
-
Medium 5.5
Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.