Storage Spaces Controller Information Disclosure Vulnerability

Azure Identity Library for .NET Information Disclosure Vulnerability

Azure AI Search Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

Event Tracing for Windows Information Disclosure Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610.

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Event Tracing Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows ActiveX Installer Service Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows Backup Engine Information Disclosure Vulnerability

Windows DirectX Information Disclosure Vulnerability

Windows Mobile Device Management Information Disclosure Vulnerability

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Microsoft Windows VMSwitch Information Disclosure Vulnerability

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.

Windows Event Tracing Information Disclosure Vulnerability

Windows CoreMessaging Information Disclosure Vulnerability

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Storage Port Driver allows an authorized attacker to disclose information locally.

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally.