Windows Remote Access Connection Manager Information Disclosure Vulnerability.

Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22011, CVE-2022-29112.

Windows NTFS Information Disclosure Vulnerability.

Windows Server Service Information Disclosure Vulnerability.

Windows Print Spooler Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-29140.

Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-22011, CVE-2022-26934.

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability.

Windows Clustered Shared Volume Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-29120, CVE-2022-29123, CVE-2022-29134.

Windows WLAN AutoConfig Service Information Disclosure Vulnerability.

Windows Graphics Component Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-26934, CVE-2022-29112.

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Microsoft Defender for Endpoint Spoofing Vulnerability

Media Foundation Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

Windows User Account Profile Picture Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Common Log File System Driver Denial of Service Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within DirectComposition. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

Windows Defender Application Control Security Feature Bypass Vulnerability.

Workstation Service Remote Protocol Security Feature Bypass Vulnerability.

Windows Defender Credential Guard Security Feature Bypass Vulnerability.

Secure Boot Security Feature Bypass Vulnerability.

Windows Hyper-V Security Feature Bypass Vulnerability. This CVE ID is unique from CVE-2022-21905.

DirectX Graphics Kernel File Denial of Service Vulnerability.

Windows GDI+ Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-21880.