This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.

Privacy Vulnerability Enabling Unauthorized Access to Sensitive User Data in macOS

A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Windows Portable Device File System Driver Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Windows WLAN Service Information Disclosure Vulnerability

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

Windows Error Reporting Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Windows Hyper-V Information Disclosure Vulnerability

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

Windows Installer Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Windows Installer Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

Windows IKE Extension Information Disclosure Vulnerability

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

Windows IKE Extension Spoofing Vulnerability

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

Windows DHCP Client Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Windows Image Acquisition Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

Windows Modern Device Management (MDM) Tampering Vulnerability

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Windows Error Reporting Information Disclosure Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.