CVE-2020-1593

A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.There are multiple ways an attacker could exploit the vulnerability, such as by convincing a us...

CVE-2021-1656

TPM Device Driver Information Disclosure Vulnerability

CVE-2021-1667

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-31954

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-21903

Windows GDI Elevation of Privilege Vulnerability

CVE-2022-21915

Windows GDI+ Information Disclosure Vulnerability

CVE-2022-21981

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-35836

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2022-37955

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2022-41097

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

CVE-2023-21686

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-35300

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2023-35639

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-38060

Windows Imaging Component Remote Code Execution Vulnerability

CVE-2025-21369

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-29810

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

CVE-2020-1534

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

CVE-2020-16889

An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log ...

CVE-2020-16960

Windows Backup Engine Elevation of Privilege Vulnerability

CVE-2021-1671

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

CVE-2021-36969

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

CVE-2022-21876

Win32k Information Disclosure Vulnerability

CVE-2022-30198

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-35834

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

CVE-2023-21699

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-21700

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVE-2023-21766

Windows Overlay Filter Information Disclosure Vulnerability

CVE-2023-32054

Volume Shadow Copy Elevation of Privilege Vulnerability

CVE-2023-35383

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2023-36908

Windows Hyper-V Information Disclosure Vulnerability

CVE-2024-30032

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

CVE-2019-1018

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with ful...

CVE-2019-1028

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

CVE-2020-1542

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

CVE-2020-1545

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

CVE-2020-1546

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

CVE-2020-1556

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specia...

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then insta...

CVE-2020-16998

DirectX Elevation of Privilege Vulnerability

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability