Microsoft

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.