Microsoft Windows Security Vulnerabilities

CVE-2024-28941

...

CVE-2024-28943

...

CVE-2024-28938

...

CVE-2024-28935

...

CVE-2024-28937

...

CVE-2024-28934

...

CVE-2024-28933

...

CVE-2024-28930

...

CVE-2024-29043

...

CVE-2024-28932

...

CVE-2024-28936

...

CVE-2024-28929

...

CVE-2024-28931

...

CVE-2024-26190

...

CVE-2024-0353

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper...

CVE-2024-21315

Microsoft Defender for Endpoint Protection Elevation of Privilege...

CVE-2023-5594

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as...

CVE-2023-38171

Microsoft QUIC Denial of Service...

CVE-2023-36785

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-36730

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-36728

Microsoft SQL Server Denial of Service...

CVE-2023-36420

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-3440

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.This issue affects JP1/Performance Management - Manager: from 09-00 before 12-50-07; JP1/Performance Management - Base: from 09-00 through 10-50-*; JP1/Performance Management -...

CVE-2023-38163

Windows Defender Attack Surface Reduction Security Feature...

CVE-2023-3160

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper...

CVE-2023-38169

Microsoft SQL OLE DB Remote Code Execution...

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution...

CVE-2023-29335

Microsoft Word Security Feature Bypass...

CVE-2023-24954

Microsoft SharePoint Server Information Disclosure...

CVE-2023-28290

Microsoft Remote Desktop app for Windows Information Disclosure...

CVE-2023-24910

Windows Graphics Component Elevation of Privilege...

CVE-2023-21823

Windows Graphics Component Remote Code Execution...

CVE-2022-21606

Vulnerability in the Oracle Services for Microsoft Transaction Server component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Services for Microsoft...

CVE-2022-37971

Microsoft Windows Defender Elevation of Privilege...

CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o.....

CVE-2022-26934

Windows Graphics Component Information Disclosure...

CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET.....

CVE-2022-22782

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...

CVE-2022-26903

Windows Graphics Component Remote Code Execution...

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user...

CVE-2022-23278

Microsoft Defender for Endpoint Spoofing...

CVE-2022-25329

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated...

CVE-2022-25330

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code...

CVE-2022-25331

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the...

CVE-2021-37852

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT...

CVE-2021-39032

IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID:...