← Back
CWE-200

11,648 CVEs • Abstraction: Class • Likelihood of Exploit: High

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

JSON object

Loading...

CVEs (11,648)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2382
1Microsoft
5Windows 8
Windows 8.1Windows Rt+2 more
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted...Show more
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2381.Show less
CVE-2015-2381
1Microsoft
6Windows 7
Windows 8Windows 8.1+3 more
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted...Show more
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2382.Show less
CVE-2015-2367
1Microsoft
9Windows 2003 Server
Windows 7Windows 8+6 more
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi...Show more
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from uninitialized kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability."Show less
CVE-2015-2421
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."
CVE-2015-2414
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2015-2413
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource request, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2015-2412
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2015-2410
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2015-2375
1Microsoft
3Excel
Excel ViewerSharepoint Server
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR...Show more
Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR Bypass Vulnerability."Show less
CVE-2015-2374
1Microsoft
3Windows 2003 Server
Windows Server 2008Windows Server 2012
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
3.3 LOW· v2
The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remo...Show more
The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon."Show less
CVE-2015-1729
1Microsoft
1Internet Explorer
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2015-1887
1Ibm
1Websphere Portal
May 6, 2026
Jul 14, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a crafted request.
CVE-2015-4263
1Cisco
1Mobility Services Engine
May 6, 2026
Jul 10, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.
CVE-2015-1011
1Hospira
1Lifecare Pcainfusion Firmware
May 6, 2026
Jul 6, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
CVE-2015-4033
1Samsung
1S Beam
May 6, 2026
Jul 6, 2015
N/A· v4
N/A· v3
3.3 LOW· v2
Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000.
CVE-2015-2742
2Mozilla
Oracle
2Firefox
Solaris
May 6, 2026
Jul 6, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...Show more
Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.Show less
CVE-2015-3721
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Jul 3, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app.
CVE-2015-3720
1Apple
1Mac Os X
May 6, 2026
Jul 3, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app.
CVE-2015-3711
1Apple
1Mac Os X
May 6, 2026
Jul 3, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app.
CVE-2015-3690
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Jul 3, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app.