Information Disclosure

Every one of the 840 is a mark on the map. Named now: 1 to 26, most at risk first.

1. .NET Framework - Leaking ObjRefs via HTTP .NET RemotingCVE-2024-29059Microsoft · CVSS 7.5 · 99% likely

   CWE-2091 bounty report

2. Windows Kernel Information Disclosure VulnerabilityCVE-2021-31955Microsoft · CVSS 5.5 · 81% likely

   CWE-497

3. The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet host…CVE-2013-7331Microsoft · CVSS 6.5 · 50% likely

   CWE-209

4. Desktop Window Manager Information Disclosure VulnerabilityCVE-2026-20805Microsoft · CVSS 5.5 · 7.5% likely

   CWE-200

5. Windows NTFS Information Disclosure VulnerabilityCVE-2025-24984Microsoft · CVSS 4.6 · 2.0% likely

   CWE-532

6. gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo…CVE-2017-0038Microsoft Corporation · 82% likely

   CWE-200

7. IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm…CVE-2000-0649Microsoft · 77% likely

   CWE-200

8. Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files…CVE-2007-0042Microsoft · 76% likely

   CWE-200

9. An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerabilit…CVE-2019-1439Microsoft · 75% likely

   CWE-200

10. Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error code…CVE-2010-3332Microsoft · 68% likely

    CWE-209

11. An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise…CVE-2018-8145Microsoft · 67% likely

    CWE-200

12. The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary files via an external entity declaratio…CVE-2015-6096Microsoft · 61% likely

    CWE-200

13. An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerabilit…CVE-2019-1252Microsoft · 60% likely

    CWE-200

14. The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo…CVE-2016-3251Microsoft · 58% likely

    CWE-200

15. An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerabilit…CVE-2018-8239Microsoft · 57% likely

    CWE-200

16. Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vuln…CVE-2016-3325Microsoft · 54% likely

    CWE-200

17. Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window…CVE-2016-3209Microsoft · 54% likely

    CWE-200

18. Windows Themes Spoofing VulnerabilityCVE-2024-38030Microsoft · CVSS 6.5 · 51% likely

    CWE-200

19. IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request w…CVE-2002-0422Microsoft · 51% likely

    CWE-200

20. Windows GDI Information Disclosure VulnerabilityCVE-2019-1009Microsoft · CVSS 4.7 · 48% likely

    CWE-200

21. Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka "Window…CVE-2015-6127Microsoft · 46% likely

    CWE-200

22. Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote att…CVE-2013-3185Microsoft · 44% likely

    CWE-200

23. Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, a…CVE-2017-0121Microsoft Corporation · 44% likely

    CWE-200

24. The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Wi…CVE-2017-0190Microsoft Corporation · 43% likely

    CWE-200

25. The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to…CVE-2016-3272Microsoft · 43% likely

    CWE-200

26. GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a…CVE-2016-0169Microsoft · 43% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.