Microsoft

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.