CVE Vulnerability Catalog

Use after free in the Windows Kernel allows an unauthorized attacker to elevate privileges via a physical attack.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to cause denial of service over a network.

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

A null pointer dereference vulnerability in Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over the network.

Use of an uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Use of an uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.