Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.

Windows CSC Service Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.

Windows Portmapping Information Disclosure Vulnerability

Windows Event Tracing Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows ActiveX Installer Service Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Office Graphics Component Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user.

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

Windows Graphics Component Information Disclosure Vulnerability

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

Windows Kernel-Mode Driver Information Disclosure Vulnerability

IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.

Windows Event Tracing Information Disclosure Vulnerability

Microsoft Windows VMSwitch Information Disclosure Vulnerability

Windows Mobile Device Management Information Disclosure Vulnerability

Windows Backup Engine Information Disclosure Vulnerability

Windows DirectX Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Windows Kernel-Mode Driver Information Disclosure Vulnerability

Security Center Broker Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Windows Authentication Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Package Library Manager Information Disclosure Vulnerability

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Event Tracing for Windows Information Disclosure Vulnerability

Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability leading to information disclosure.