CVE-2025-21204

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2019-0906

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE-2019-1053

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox.To exploit this vulnerability, an attacker would require unprivileged execution on the vi...

CVE-2020-1519

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The securit...

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVE-2021-31182

Microsoft Bluetooth Driver Spoofing Vulnerability

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

CVE-2022-26936

Windows Server Service Information Disclosure Vulnerability

CVE-2022-35744

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVE-2023-21679

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-23411

Windows Hyper-V Denial of Service Vulnerability

CVE-2023-24901

Windows NFS Portmapper Information Disclosure Vulnerability

CVE-2023-24929

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-33154

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVE-2023-36911

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2019-0713

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual mach...

CVE-2019-1150

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

CVE-2021-40465

Windows Text Shaping Remote Code Execution Vulnerability

CVE-2023-24867

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-35367

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2024-28899

Secure Boot Security Feature Bypass Vulnerability

CVE-2025-21417

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-31968

Windows Remote Desktop Services Denial of Service Vulnerability

CVE-2022-41076

PowerShell Remote Code Execution Vulnerability

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2023-21546

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2023-23422

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-24856

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-24887

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2024-30027

NTFS Elevation of Privilege Vulnerability

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability

CVE-2024-49046

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-21310

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2019-0722

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

CVE-2019-1144

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

CVE-2020-1516

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The sec...

CVE-2020-17001

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-27072

Win32k Elevation of Privilege Vulnerability

CVE-2021-36953

Windows TCP/IP Denial of Service Vulnerability

CVE-2021-36974

Windows SMB Elevation of Privilege Vulnerability

CVE-2022-41047

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21799

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-21813

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-24868

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-24908

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2023-24911

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability