CVE Vulnerability Catalog

A missing cryptographic step in the Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

Uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Improper access control vulnerability in Windows Kernel. An authorized attacker can bypass a security feature locally.

In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information via a physical attack.

Use of uninitialized resource in Windows RDP allows an authenticated attacker to disclose information over a network.

A TOCTOU race condition in Windows Subsystem for Linux (WSL) allows an authorized attacker to perform local tampering. The vulnerability stems from a race between resource check and use.

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.

Vulnerability in Windows Print Spooler Components involving an out-of-bounds read. Allows an authorized attacker to disclose information locally.

A vulnerability in Windows File Explorer involves the use of an uninitialized resource. An unauthorized attacker can disclose information locally.

Uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.

A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Defender for Endpoint contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that allows an authorized attacker to elevate privileges locally.