Baza CVE

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and…

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.