CVE Vulnerability Catalog

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges via a physical attack.

A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

In Microsoft Defender, exposure of private personal information to an unauthorized actor allows an authorized attacker to disclose information locally.

A buffer over-read vulnerability exists in Remote Desktop Client. An unauthorized attacker can exploit this to disclose information remotely over the network.

Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code via a physical attack.

In Windows Hyper-V, a buffer over-read vulnerability allows an authorized attacker to cause a denial of service (DoS) over an adjacent network.

A vulnerability in the Microsoft Graphics component allows an authorized attacker to disclose sensitive information locally to an unauthorized actor.

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

A buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information via a physical attack.

A buffer over-read vulnerability exists in Windows RDP. An unauthorized attacker can exploit this to disclose information remotely over the network.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

A use-after-free vulnerability in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to cause a denial of service over a network.