Tinysec

Use of an uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges through a physical attack.

An issue in Windows Win32K allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere.

An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing adjacent memory locations.