Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVEs (11,754)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-0075 1Microsoft 4Windows 10 Windows 8.1Windows Rt 8.1+1 more May 6, 2026 Oct 14, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access s...Show more The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0073.Show less
CVE-2016-0073 1Microsoft 4Windows 10 Windows 8.1Windows Rt 8.1+1 more May 6, 2026 Oct 14, 2016 N/A· v4 5.0 MEDIUM· v3 2.1 LOW· v2 The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access s...Show more The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0075.Show less
CVE-2016-0070 1Microsoft 7Windows 10 Windows 7Windows 8.1+4 more May 6, 2026 Oct 14, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain p...Show more The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability."Show less
CVE-2016-3946 1Sap 1Sapconsole May 6, 2026 Oct 13, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.
CVE-2016-7960 1Siemens 1Simatic Step 7 May 6, 2026 Oct 13, 2016 N/A· v4 2.5 LOW· v3 1.9 LOW· v2 Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspeci...Show more Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors.Show less
CVE-2016-8100 1Intel 1Integrated Performance Primitives May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack.
CVE-2016-6689 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30768347.
CVE-2016-6688 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080.
CVE-2016-6687 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30162222.
CVE-2016-6686 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30163101.
CVE-2016-6685 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30402628.
CVE-2016-6684 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug...Show more The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243.Show less
CVE-2016-6683 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30143283.
CVE-2016-6682 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obta...Show more drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152501 and Qualcomm internal bug CR 1049615.Show less
CVE-2016-6681 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obta...Show more drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152182 and Qualcomm internal bug CR 1049521.Show less
CVE-2016-6680 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iw_set_p...Show more CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iw_set_priv ioctl call, aka Android internal bug 29982678 and Qualcomm internal bug CR 1048052.Show less
CVE-2016-6679 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpa...Show more CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR 1000913.Show less
CVE-2016-6678 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 29914434.
CVE-2016-6677 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955.
CVE-2016-3924 1Google 1Android May 6, 2026 Oct 10, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECT_CMD_SET_PARAM and EFFECT_CMD...Show more services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate EFFECT_CMD_SET_PARAM and EFFECT_CMD_SET_PARAM_DEFERRED commands, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 30204301.Show less

Previous 1...439440441...588 Next