1,441 results · Clear filters · Feed
-
Medium 4.7
Windows Hyper-V Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Network File System Information Disclosure Vulnerability
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Server for NFS Information Disclosure Vulnerability
Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
Medium 4.7
Windows WinHTTP Information Disclosure Vulnerability
Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Windows Active Directory Denial of Service Vulnerability
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
Medium 4.3
Windows Smart Card Information Disclosure Vulnerability
Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.
-
Medium 5.5
Mailslot File System Information Disclosure Vulnerability
Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows System Events Broker Information Disclosure Vulnerability
Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.
-
Medium 5.0
Windows Shell Information Disclosure Vulnerability
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.
-
Medium 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability
Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
-
Medium 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Telephony Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 6.4
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows NTFS Tampering Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.
-
Medium 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows DHCP Server Spoofing Vulnerability
Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.