ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory.</p> <p>To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>The security update addresses the vulnerability by correcting how DHCP servers initializes memory.</p>

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user’s computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory., aka 'Scripting Engine Information Disclosure Vulnerability'.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Windows GDI+ Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Microsoft Defender for IoT Information Disclosure Vulnerability

Windows DNS Spoofing Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Bot Framework SDK Remote Code Execution Vulnerability

SCOM Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Windows LSA Spoofing Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Azure SDK Spoofing Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Server for NFS Information Disclosure Vulnerability

Server for NFS Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.

Microsoft SharePoint Server Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory, aka 'Remote Desktop Protocol Information Disclosure Vulnerability'.

Windows Cryptographic Services Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Windows Deployment Services Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Windows Remote Procedure Call Information Disclosure Vulnerability

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.

Windows Network File System Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory.

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory.

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.

Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network.

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.