Microsoft

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.