.NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Windows Security Center Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Microsoft PowerShell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

Windows Hello Security Feature Bypass Vulnerability

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

Microsoft Office Word Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...

Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Visual Studio Code Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability

Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...