Lucene search

K

Microsoft Security Vulnerabilities

cve
cve

CVE-2022-38029

Windows ALPC Elevation of Privilege...

7CVSS

6.8AI Score

0.0004EPSS

2022-10-11 07:15 PM
118
3
cve
cve

CVE-2022-38047

Windows Point-to-Point Tunneling Protocol Remote Code Execution...

8.1CVSS

8.8AI Score

0.005EPSS

2022-10-11 07:15 PM
92
4
cve
cve

CVE-2020-1503

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...

5.5CVSS

5.5AI Score

0.014EPSS

2020-08-17 07:15 PM
81
cve
cve

CVE-2022-34731

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

8.8CVSS

9.2AI Score

0.015EPSS

2022-09-13 07:15 PM
53
12
cve
cve

CVE-2022-34730

Microsoft ODBC Driver Remote Code Execution...

8.8CVSS

8.9AI Score

0.015EPSS

2022-09-13 07:15 PM
60
14
cve
cve

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege...

5.5CVSS

5.5AI Score

0.0004EPSS

2021-11-10 01:19 AM
122
cve
cve

CVE-2022-26934

Windows Graphics Component Information Disclosure...

6.5CVSS

6.6AI Score

0.009EPSS

2022-05-10 09:15 PM
98
6
cve
cve

CVE-2022-37955

Windows Group Policy Elevation of Privilege...

7.8CVSS

7.5AI Score

0.001EPSS

2022-09-13 07:15 PM
54
4
cve
cve

CVE-2020-1583

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...

8.8CVSS

7.8AI Score

0.135EPSS

2020-08-17 07:15 PM
104
cve
cve

CVE-2022-22035

Windows Point-to-Point Tunneling Protocol Remote Code Execution...

8.1CVSS

8.8AI Score

0.005EPSS

2022-10-11 07:15 PM
44
11
cve
cve

CVE-2020-1476

An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an attacker would need to...

5.5CVSS

6AI Score

0.0004EPSS

2020-08-17 07:15 PM
155
cve
cve

CVE-2019-0718

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the...

5.8CVSS

5.8AI Score

0.001EPSS

2019-08-14 09:15 PM
82
cve
cve

CVE-2022-35833

Windows Secure Channel Denial of Service...

7.5CVSS

7.6AI Score

0.002EPSS

2022-09-13 07:15 PM
60
6
cve
cve

CVE-2022-29126

Tablet Windows User Interface Application Core Elevation of Privilege...

7CVSS

7.2AI Score

0.0004EPSS

2022-05-10 09:15 PM
159
6
cve
cve

CVE-2022-38027

Windows Storage Elevation of Privilege...

7CVSS

6.8AI Score

0.0004EPSS

2022-10-11 07:15 PM
88
4
cve
cve

CVE-2020-1533

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

7.8CVSS

7.7AI Score

0.0004EPSS

2020-08-17 07:15 PM
81
cve
cve

CVE-2019-1151

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data;....

8.8CVSS

8.7AI Score

0.126EPSS

2019-08-14 09:15 PM
128
cve
cve

CVE-2022-38045

Windows Server Service Elevation of Privilege...

8.8CVSS

9AI Score

0.001EPSS

2022-10-11 07:15 PM
158
5
cve
cve

CVE-2022-37965

Windows Point-to-Point Tunneling Protocol Denial of Service...

5.9CVSS

6.2AI Score

0.001EPSS

2022-10-11 07:15 PM
38
cve
cve

CVE-2020-1521

An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
81
cve
cve

CVE-2020-1515

An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
89
cve
cve

CVE-2020-1538

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
87
cve
cve

CVE-2022-41103

Microsoft Word Information Disclosure...

5.5CVSS

5AI Score

0.001EPSS

2022-11-09 10:15 PM
55
6
cve
cve

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass...

6.8CVSS

6.3AI Score

0.003EPSS

2021-06-08 11:15 PM
103
6
cve
cve

CVE-2020-1529

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete.....

7.8CVSS

7.6AI Score

0.0004EPSS

2020-08-17 07:15 PM
90
cve
cve

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a...

5.5CVSS

5.6AI Score

0.0004EPSS

2020-08-17 07:15 PM
95
cve
cve

CVE-2019-1181

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction......

9.8CVSS

9.6AI Score

0.119EPSS

2019-08-14 09:15 PM
311
cve
cve

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege...

7.5CVSS

7.8AI Score

0.001EPSS

2021-11-10 01:19 AM
121
cve
cve

CVE-2020-1470

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The.....

7.8CVSS

7.8AI Score

0.002EPSS

2020-08-17 07:15 PM
112
cve
cve

CVE-2020-1547

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
77
cve
cve

CVE-2020-1540

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
88
cve
cve

CVE-2020-1539

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

7.8CVSS

7.8AI Score

0.0004EPSS

2020-08-17 07:15 PM
94
cve
cve

CVE-2021-43224

Windows Common Log File System Driver Information Disclosure...

5.5CVSS

5.9AI Score

0.0004EPSS

2021-12-15 03:15 PM
63
cve
cve

CVE-2022-41060

Microsoft Word Information Disclosure...

5.5CVSS

5AI Score

0.001EPSS

2022-11-09 10:15 PM
47
4
cve
cve

CVE-2021-38662

Windows Fast FAT File System Driver Information Disclosure...

5.5CVSS

5.6AI Score

0.0004EPSS

2021-10-13 01:15 AM
70
cve
cve

CVE-2022-29103

Windows Remote Access Connection Manager Elevation of Privilege...

7.8CVSS

7.6AI Score

0.0004EPSS

2022-05-10 09:15 PM
64
4
cve
cve

CVE-2022-29128

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution...

8.8CVSS

8.7AI Score

0.011EPSS

2022-05-10 09:15 PM
118
23
cve
cve

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution...

8.8CVSS

8.7AI Score

0.011EPSS

2022-05-10 09:15 PM
113
22
cve
cve

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure...

6.5CVSS

6.2AI Score

0.001EPSS

2022-05-10 09:15 PM
117
5
cve
cve

CVE-2022-41089

.NET Framework Remote Code Execution...

7.8CVSS

8.2AI Score

0.002EPSS

2022-12-13 07:15 PM
138
cve
cve

CVE-2021-31973

Windows GPSVC Elevation of Privilege...

7.8CVSS

7.4AI Score

0.0004EPSS

2021-06-08 11:15 PM
84
8
cve
cve

CVE-2022-30138

Windows Print Spooler Elevation of Privilege...

7.8CVSS

7.5AI Score

0.001EPSS

2022-05-18 11:15 PM
177
4
cve
cve

CVE-2022-23270

Windows Point-to-Point Tunneling Protocol Remote Code Execution...

8.1CVSS

8AI Score

0.009EPSS

2022-05-10 09:15 PM
117
5
cve
cve

CVE-2022-22049

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege...

7.8CVSS

8AI Score

0.0004EPSS

2022-07-12 11:15 PM
110
In Wild
6
cve
cve

CVE-2021-40469

Windows DNS Server Remote Code Execution...

7.2CVSS

7.8AI Score

0.013EPSS

2021-10-13 01:15 AM
141
3
cve
cve

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege...

7.5CVSS

7.9AI Score

0.585EPSS

2021-11-10 01:19 AM
1055
In Wild
9
cve
cve

CVE-2021-42280

Windows Feedback Hub Elevation of Privilege...

5.5CVSS

5.3AI Score

0.0004EPSS

2021-11-10 01:19 AM
84
cve
cve

CVE-2022-37990

Windows Kernel Elevation of Privilege...

7.8CVSS

7.5AI Score

0.0004EPSS

2022-10-11 07:15 PM
40
5
cve
cve

CVE-2023-21728

Windows Netlogon Denial of Service...

7.5CVSS

7.4AI Score

0.002EPSS

2023-01-10 10:15 PM
92
cve
cve

CVE-2022-41077

Windows Fax Compose Form Elevation of Privilege...

7.8CVSS

7.9AI Score

0.0004EPSS

2022-12-13 07:15 PM
64
Total number of security vulnerabilities19439