CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.
An exposure of sensitive information vulnerability in Windows File Explorer allows an authorized attacker to disclose information locally.
An exposure of sensitive information vulnerability in Windows File Explorer allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information via a physical attack.
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
An exposure of sensitive information in Windows File Explorer allows an authorized attacker to disclose information locally.
A race condition in Windows SMB Server allows an authenticated attacker to cause a denial of service over the network.
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
An exposure of sensitive information vulnerability in Windows Management Services allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
Generation of error messages containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
An absolute path traversal vulnerability in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
An out-of-bounds read vulnerability in Windows TPM allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information via a physical attack.
An exposure of sensitive information in the Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.