CVE Vulnerability Catalog

An incorrect privilege assignment vulnerability in Windows Hello allows an unauthorized attacker to perform tampering locally.

An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.

Vulnerability in Windows Kerberos relies on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges over a network.

A race condition vulnerability in Windows SMB Server allows an authorized attacker to elevate privileges over a network. The issue stems from improper synchronization when accessing shared resources concurrently.

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

A use-after-free vulnerability in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in Windows DWM allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.

Generation of error messages containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.

A heap-based buffer overflow vulnerability in Windows Media allows an unauthorized attacker to execute code locally.

A race condition exists in the Graphics Kernel due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.

An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.

An absolute path traversal vulnerability in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

A Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability.

A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally.

A race condition vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

An out-of-bounds read vulnerability in Windows TPM allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information via a physical attack.