Base de CVEs

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.

Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.