3170 matches found
CVE-2022-37989
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2023-21697
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21756
Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-28276
Windows Group Policy Security Feature Bypass Vulnerability
CVE-2023-32041
Windows Update Orchestrator Service Information Disclosure Vulnerability
CVE-2023-35328
Windows Transaction Manager Elevation of Privilege Vulnerability
CVE-2023-36913
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-38049
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVE-2024-38062
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-38064
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21349
Windows Remote Desktop Configuration Service Tampering Vulnerability
CVE-2025-21419
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVE-2025-24035
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2018-8200
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. T...
CVE-2018-8212
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. T...
CVE-2018-8462
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2019-1060
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
CVE-2019-1097
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.
CVE-2019-1163
A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.To exploit the vulnerability, an attacker could modify a signed CAB file and...
CVE-2019-1177
An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted ...
CVE-2019-1286
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1252.
CVE-2019-1391
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207.
CVE-2019-1454
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2020-0709
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.
CVE-2020-0784
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.
CVE-2020-0803
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0804, CVE-2020-0845.
CVE-2020-0988
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0992, CVE-2020-0994,...
CVE-2020-1253
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1310.
CVE-2020-1390
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
CVE-2020-16935
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...
CVE-2020-17000
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2021-24081
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2021-24103
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-28323
Windows DNS Information Disclosure Vulnerability
CVE-2021-42274
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
CVE-2022-26807
Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2022-35832
Windows Event Tracing Denial of Service Vulnerability
CVE-2022-37996
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2023-32055
Active Template Library Elevation of Privilege Vulnerability
CVE-2023-35312
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
CVE-2023-35362
Windows Clip Service Elevation of Privilege Vulnerability
CVE-2024-30039
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-38066
Windows Win32k Elevation of Privilege Vulnerability
CVE-2024-38143
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
CVE-2025-21254
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21270
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21312
Windows Smart Card Reader Information Disclosure Vulnerability
CVE-2025-21324
Windows Digital Media Elevation of Privilege Vulnerability