CVE-2024-37989

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38025

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVE-2024-38034

Windows Filtering Platform Elevation of Privilege Vulnerability

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21406

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21407

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2020-0839

An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially craft...

CVE-2020-0921

Microsoft Graphics Component Denial of Service Vulnerability

CVE-2020-1256

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit ...

CVE-2020-1471

An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.To exploit the vulnerability, an attacker would have to log on to an aff...

CVE-2020-16912

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

CVE-2021-1684

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...

CVE-2021-43232

Windows Event Tracing Remote Code Execution Vulnerability

CVE-2021-43234

Windows Fax Service Remote Code Execution Vulnerability

CVE-2022-34728

Windows Graphics Component Information Disclosure Vulnerability

CVE-2023-35308

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2023-35316

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVE-2024-37986

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38010

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38105

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

CVE-2024-38254

Windows Authentication Information Disclosure Vulnerability

CVE-2024-49088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-24055

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

CVE-2025-24066

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2025-26668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2025-32720

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2020-0790

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.This vulnerability by itself does not allow arbitrary code ex...

CVE-2020-17007

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2020-17028

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2021-1681

Windows WalletService Elevation of Privilege Vulnerability

CVE-2021-27093

Windows Kernel Information Disclosure Vulnerability

CVE-2021-28317

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVE-2022-35760

Microsoft ATA Port Driver Elevation of Privilege Vulnerability

CVE-2022-35793

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

CVE-2023-24906

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-32040

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2023-35296

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2024-30067

Winlogon Elevation of Privilege Vulnerability

CVE-2024-37974

Secure Boot Security Feature Bypass Vulnerability

CVE-2024-38022

Windows Image Acquisition Elevation of Privilege Vulnerability

CVE-2024-38056

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVE-2024-38057

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2024-38069

Windows Enroll Engine Security Feature Bypass Vulnerability

CVE-2024-38242

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2025-21221

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

CVE-2025-21247

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVE-2025-21319

Windows Kernel Memory Information Disclosure Vulnerability