Microsoft Windows Network Driver Interface Specification Buffer Error Vulnerability

The Microsoft Windows Network Driver Interface Specification is one of the core components of a Windows network architecture from Microsoft Corporation. A buffer error vulnerability exists in the Microsoft Windows Network Driver Interface Specification. An attacker could exploit this vulnerabilit...

Microsoft HTTP.Sys access control error vulnerability

Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...

Microsoft Windows Telephony Server security vulnerabilities

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows SMB Server race condition vulnerability

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...

Microsoft Win32k Resource Management Vulnerability

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. Microsoft Win32k is vulnerable to a resource management error. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server...

Microsoft Windows encryption vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows suffers from an encryption problem vulnerability. An attacker exploiting this vulnerability could elevate privileges. The following products and...

Microsoft Windows Deployment Services Access Control Error Vulnerability

Microsoft Windows Deployment Services is a setup container for Microsoft's Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS, that can be used to set up new computers via unattended network-based installations. An access control error vulnerability...

Microsoft Windows Shell information leakage vulnerability

The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of Windows, featur...

Microsoft Win32k Resource Management Vulnerability

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. Microsoft Win32k is vulnerable to a resource management error. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected: Windows Server...

Microsoft Windows Ancillary Function Driver for WinSock security vulnerability

Microsoft Windows Ancillary Function Driver for WinSock is an ancillary function driver for Winsock from Microsoft USA. An elevation of privilege vulnerability exists in the Microsoft Windows Ancillary Function Driver for WinSock due to a type obfuscation flaw in the auxiliary function driver for...

Microsoft Windows SMB Server race condition vulnerability

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...

Microsoft Windows CSC Service Access Control Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. that allows the use of network files while the local computer is offline. An access control error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could gain access to sensitive...

Microsoft DWM Core Library resource management error vulnerability

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A resource management error vulnerability exists in the Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Kernel security vulnerabilities

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Windows Server...

Microsoft Windows Secure Boot security vulnerabilities

Microsoft Windows Secure Boot is a secure boot from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker exploiting this vulnerability could bypass certain features. The following products and editions are affected:Windows 10 Version 1809 for...

KB5073457: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (January 2026)

The remote Windows host is missing security update 5073457. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

Microsoft Windows Kernel log information leakage vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows Kernel. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit this vulnerability to gain elevated privileges. The following products and versions are...