CVE Vulnerability Catalog

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.

A vulnerability in Windows Win32K allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

An out-of-bounds read vulnerability in Windows Win32K allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.

A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

A race condition vulnerability in Windows Win32K allows an authorized attacker to bypass a security feature locally.

A missing release of memory after effective lifetime vulnerability in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

An improper link resolution before file access (link following) vulnerability in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.

A use of uninitialized resource vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.