CVE Vulnerability Catalog

A use of uninitialized resource vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally. The issue involves use of an uninitialized resource.

An incorrect authorization vulnerability in Windows SMB Client allows an authorized attacker to bypass a security feature locally. The issue involves improper authorization checks.

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.

An out-of-bounds read in the Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Improper link resolution before file access ('link following') in the Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Use of an uninitialized resource in the Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

Incorrect implementation of an authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

A heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges via a physical attack.

A vulnerability in the Windows Clipboard User Service allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.