CVE Vulnerability Catalog

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.

Vulnerability in Windows Print Spooler Components involving an out-of-bounds read. Allows an authorized attacker to disclose information locally.

A vulnerability in Windows File Explorer involves the use of an uninitialized resource. An unauthorized attacker can disclose information locally.

Uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.

A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

Microsoft Defender for Endpoint contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that allows an authorized attacker to elevate privileges locally.

A null pointer dereference in Windows SMB Server allows an authorized attacker to cause a denial of service over the network.

An improper access control vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Outlook Copilot has a command injection vulnerability due to improper neutralization of special elements used in commands. This allows an authorized attacker to perform tampering over a network.

A numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An untrusted pointer dereference vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. The flaw can be exploited to read sensitive data from memory.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

The vulnerability in Microsoft Office Word is caused by improper validation of a specified type of input. It allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.