23503 matches found
Microsoft Windows Virtualization-Based Security Enclave Security Vulnerabilities
The Microsoft Windows Virtualization-Based Security Enclave is a software-based trusted execution environment within the host application address space provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Windows Virtualization-Based Security Enclave...
Microsoft Windows Resource Management Vulnerability
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Universal Plug and Play UPnP Device Host has a resource management vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products a...
Microsoft Windows Remote Desktop Services security vulnerabilities
Microsoft Windows Remote Desktop Services is a set of features provided by Microsoft that allow users to access graphical desktops and Windows applications remotely. There are security vulnerabilities in Microsoft Windows Remote Desktop Services. Attackers can exploit these vulnerabilities to car...
Microsoft Desktop Windows Manager resource management error vulnerability
Microsoft Desktop Windows Manager is a desktop window manager developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Desktop Windows Manager. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...
Microsoft Windows Input Validation Vulnerability
Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Server Update Service has a vulnerability related to input validation errors, which stem from incorrect input validation. The following products and versions are affected:...
Microsoft Windows security vulnerabilities
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows Universal Plug and Play UPnP Device Host. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and...
Microsoft Windows Hello input validation vulnerability
Microsoft Windows Hello is a biometric login method provided by the American company Microsoft. It allows users to log in using their face, fingerprint, or PIN. There is an input validation vulnerability in Microsoft Windows Hello. Attackers can exploit this vulnerability to bypass certain...
Microsoft Windows Active Directory Authorization Vulnerability
Microsoft Windows Active Directory is a centralized directory management service provided by Microsoft for managing large-scale network environments. It stores information about objects on the network, enabling administrators and users to easily find and use this information. There are...
Microsoft Windows GDI buffer error vulnerability
Microsoft Windows GDI is a core underlying standard interface within the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows...
Microsoft Input-Output Memory Management Unit security vulnerability
The Microsoft Input-Output Memory Management Unit is a hardware component of the American company Microsoft. It connects I/O buses that support DMA functions to system memory. There are security vulnerabilities associated with the Microsoft Input-Output Memory Management Unit. The following...
Microsoft Windows Access Control Error Vulnerability
Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows RPC API contains a vulnerability related to access control errors. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...
Microsoft Windows Resource Management Vulnerability
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows TDI Translation Driver tdx.sys contains a resource management vulnerability that can be exploited by attackers to gain elevated privileges. The following products and version...
Microsoft Snipping Tool information leakage vulnerability
Microsoft Snipping Tool is a screenshot tool developed by Microsoft Corporation. The Microsoft Snipping Tool has an information leakage vulnerability. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are affected: Windows 10 Version 21H...
Microsoft Windows Storage Spaces Controller numerical error vulnerability
Microsoft Windows Storage Spaces Controller is a necessary driver provided by Microsoft for providing storage space functions. There is a numerical error vulnerability in Microsoft Windows Storage Spaces Controller. Attackers can exploit this vulnerability to gain higher privileges. The following...
Microsoft Applocker Filter Driver race condition vulnerability
The Microsoft Applocker Filter Driver is a component developed by Microsoft that is used in Windows operating systems to implement application control. The Microsoft Applocker Filter Driver applockerfltr.sys has a race condition vulnerability. Attackers can exploit this vulnerability to gain...
KB5082127: Windows Server 2012 Security Update (April 2026)
The remote Windows host is missing security update 5082127. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-32225 - Use after free in Remote Desktop Client...
KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)
The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...
KB5082198: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2026)
The remote Windows host is missing security update 5082198. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...
KB5082126: Windows Server 2012 R2 Security Update (April 2026)
The remote Windows host is missing security update 5082126. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-32225 - Use after free in Remote Desktop Client...