Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Media security vulnerabilities

Microsoft Windows Media is a series of media playback and management software from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Media. An attacker could exploit the vulnerability to execute code. The following products and editions are affected:Windows 10 Versio...

Windows Search Privilege Escalation

The vulnerability of the Windows Search service in Microsoft Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

Windows Privilege Escalation

The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Media Component Code Execution

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Virtual Hard Disks security vulnerabilities

Microsoft Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Virtual Hard Disks. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22H2 for...

Windows Shell Bypass Security Restrictions

The vulnerability of the Windows Shell component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

Remote Access Connection Manager Privilege Escalation

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Windows SDK Privilege Escalation

The vulnerability of Windows SDK tool sets for developing applications on Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

Windows Media Privilege Escalation

The vulnerability of the Windows Media component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Storage Management Provider Unauthorized Access

The vulnerability of the Storage Management Provider component in Windows operating systems is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Standards-Based Storage Management Service DoS

The vulnerability of the Standards-Based Storage Management Service for Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20250616-08

Vulnerability in Mozilla Firefox, Firefox ESR browsers and Thunderbird mail client of operating systems Windows is related to insufficient process isolation when processing "javascript:" URI links. Exploitation of the The exploitation of this vulnerability could allow a remote attacker to bypass...

Common Log File System Driver Privilege Escalation

The vulnerability of the Common Log File System Driver for Microsoft Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Local Security Authority Server Access Control Vulnerability

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit this vulnerability to cause a denial of service on the system. The...

CVE-2024-23594

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to execute arbitrary code...

CVE-2023-35077

An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...

CVE-2021-37938

It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to load internal files ending in the .pbf extension. Thanks to Dominic Coutur...

CVE-2025-46714

Sandboxie is affected by a pool-buffer overflow in SbieDrv.sys via API_GET_SECURE_PARAM. The issue originates from an arithmetic overflow that causes a too-small memory allocation followed by an extremely large copy, affecting versions 1.3.0 through before 1.15.12. Version 1.15.12 contains the fi...

CVE-2019-17640

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...