Windows Secure Kernel Mode Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an unauthorized attacker to disclose information over a network.
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.
Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network.