Lucene search
K

21701 matches found

Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows Installer Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00206EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00203EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00162EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00256EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally...

7.8CVSS6.6AI score0.00411EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Windows UPnP Device Host Information Disclosure Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to disclose information over an adjacent network...

6.5CVSS6.2AI score0.0036EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00307EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

6.1CVSS6.2AI score0.0036EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•11 views

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.5AI score0.00706EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

HTTP.sys Denial of Service Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.01248EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

8.4CVSS6.6AI score0.00292EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Kernel Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7CVSS6.5AI score0.00243EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally...

5.5CVSS6.2AI score0.00416EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00299EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows User Interface Core Elevation of Privilege Vulnerability

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.002EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00201EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows UPnP Device Host Remote Code Execution Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS6.4AI score0.00286EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00383EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00458EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Package Catalog Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00422EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00351EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00186EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.0018EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

Use after free in Windows TDI Translation Driver tdx.sys allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.01552EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00298EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00266EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

9.8CVSS5.9AI score0.5585EPSS
Exploits2
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6.4AI score0.00316EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS6.4AI score0.00291EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00258EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows Speech Runtime Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00197EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•15 views

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00158EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows Hyper-V Remote Code Execution Vulnerability

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally...

7.3CVSS6.4AI score0.00317EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Print Spooler Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00353EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Web Account Manager Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00339EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00258EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00321EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0032EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00384EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•2 views

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00221EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Windows TCP/IP Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

8.1CVSS6.1AI score0.00837EPSS
Exploits1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Improper access control in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00221EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Print Spooler Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00223EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•3 views

Windows Shell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score0.00908EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.24172EPSS
Exploits1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS6.4AI score0.00292EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.3AI score0.00293EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Azure Logic Apps Elevation of Privilege Vulnerability

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

8.8CVSS6.3AI score0.0044EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Biometric Service Security Feature Bypass Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6.4AI score0.00193EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00158EPSS
Exploits0
Total number of security vulnerabilities21701