주요 제품 취약점 (2,105건)

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information loca…

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information loc…

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…

Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclos…

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locall…

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information…

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service…

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose informati…

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass…

Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a securit…

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a se…

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical atta…

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow…

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR,…

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR …

An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arb…

OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack dur…

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on…

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH ent…

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Cu…

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (…

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory co…

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protect…

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to versi…

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.