| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. |
| Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. |
| Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
| Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
| Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
| Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. |
| Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network. |
| Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
| Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. |
| Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information. |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
| Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
| Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
| Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
