CVE-2023-36598

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

CVE-2023-36582

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36583

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36585

Windows upnphost.dll Denial of Service Vulnerability

CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2023-36709

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2023-36724

Windows Power Management Service Information Disclosure Vulnerability

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-29988

SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2024-26161

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2025-33053

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

CVE-2024-30092

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2024-38112

Windows MSHTML Platform Spoofing Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2022-38028

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2023-29325

Windows OLE Remote Code Execution Vulnerability

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-30040

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2025-33065

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2025-33052

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2024-21408

Windows Hyper-V Denial of Service Vulnerability

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability

CVE-2018-8639

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2024-20674

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

CVE-2024-21438

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2024-21416

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26207

Windows Remote Access Connection Manager Information Disclosure Vulnerability