CVE Vulnerability Catalog

A use of uninitialized resource vulnerability in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

An out-of-bounds read vulnerability in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows Overlay Filter allows an authorized attacker to disclose information locally.

A vulnerability in the Windows MIDI Service Module allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

Missing authentication for a critical function in the Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

An out-of-bounds read in the Windows Imaging Component allows an authorized attacker to disclose information locally.

An out-of-bounds read in the Remote Desktop Client allows an authorized attacker to disclose information over a network.

A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.

A vulnerability in the Windows License Manager allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

An out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

An out-of-bounds read in the Push Message Routing Service allows an authorized attacker to disclose information locally.

Storing passwords in a recoverable format in the Windows DHCP Server allows an authorized attacker to disclose information over a network.

A vulnerability in Microsoft COM for Windows causes error messages to contain sensitive information. This allows an authorized attacker to disclose information locally.

A vulnerability in Windows GDI+ involves the use of an uninitialized resource, allowing an authorized attacker to disclose information locally.

A vulnerability in the Windows USB Audio Class driver (usbaudio.sys) causes an out-of-bounds read, allowing an authorized attacker to disclose information locally.

A vulnerability in Windows Connected User Experiences and Telemetry is due to insufficient granularity of access control, allowing an authorized attacker to disclose information locally.

A vulnerability in Windows iSCSI causes an out-of-bounds read, allowing an unauthorized attacker to deny service over a network.

A vulnerability in Internet Storage Name Service is due to a numeric truncation error, allowing an authorized attacker to disclose information locally.