A out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can sensitive data stored in the TPM.

A out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

Windows CD-ROM File System Driver Remote Code Execution Vulnerability.

Windows Contacts Remote Code Execution Vulnerability

Windows Defender Credential Guard Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability.

Windows Graphics Component Elevation of Privilege Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Fax Compose Form Elevation of Privilege Vulnerability

PowerShell Remote Code Execution Vulnerability.

Windows Graphics Component Information Disclosure Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability