CVE Vulnerability Catalog

A vulnerability in the Windows Clipboard User Service allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

An out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.

Relative path traversal in Windows (wininet.dll) allows an authorized attacker to perform tampering locally.

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

An out-of-bounds read in the Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges through a physical attack.

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.