CVE Vulnerability Catalog

An out-of-bounds read vulnerability in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. The issue involves improper reading beyond buffer boundaries.

An out-of-bounds read vulnerability in Windows Device Association Service allows an authorized attacker to disclose information locally. The issue involves improper reading beyond buffer boundaries.

A race condition vulnerability (concurrent execution using a shared resource with improper synchronization) in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

An out-of-bounds read vulnerability in Windows Device Association Service allows an authorized attacker to disclose information over a network. The issue involves improper reading beyond buffer boundaries.

A weak authentication vulnerability in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The issue involves an insufficient authentication mechanism.

A use of uninitialized resource vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally. The issue involves use of an uninitialized resource.

An incorrect authorization vulnerability in Windows SMB Client allows an authorized attacker to bypass a security feature locally. The issue involves improper authorization checks.

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.

An out-of-bounds read in the Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Improper link resolution before file access ('link following') in the Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Use of an uninitialized resource in the Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

Incorrect implementation of an authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

A heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges via a physical attack.