CVE Vulnerability Catalog

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

A vulnerability in the Windows Search component allows insertion of sensitive information into an externally accessible file or directory. An authorized attacker could exploit this to disclose information over a network.

An out-of-bounds read vulnerability in Windows NTFS allows an authorized attacker to disclose information locally. The flaw may expose data that should not be accessible.

A missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to cause a denial of service over the network. The vulnerability can lead to memory exhaustion and service disruption.

An out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges via a physical attack. The vulnerability requires physical access to the device.

An out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. The flaw may allow reading memory contents that should be inaccessible.

A use-after-free vulnerability in Windows Overlay Filter allows an authorized attacker to disclose information over a network. The flaw involves using memory after it has been freed, potentially leading to unauthorized data access.

An integer overflow or wraparound in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

An out-of-bounds read vulnerability in the Windows USB Driver allows an authorized attacker to disclose information locally.

A missing authorization vulnerability in the Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

A heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

An improper link resolution before file access vulnerability in Windows NTFS allows an authorized attacker to perform tampering locally.

A buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

A missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.