2952 matches found
CVE-2020-1015
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
CVE-2021-36933
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2022-22001
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2022-22022
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-29137
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-38046
Web Account Manager Information Disclosure Vulnerability
CVE-2023-23385
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
CVE-2023-23412
Windows Accounts Picture Elevation of Privilege Vulnerability
CVE-2023-24861
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-28227
Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-29359
GDI Elevation of Privilege Vulnerability
CVE-2024-26220
Windows Mobile Hotspot Information Disclosure Vulnerability
CVE-2024-26240
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26241
Win32k Elevation of Privilege Vulnerability
CVE-2025-21245
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2019-0579
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...
CVE-2019-0795
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.
CVE-2019-0879
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.
CVE-2019-1273
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'.
CVE-2019-1282
An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.
CVE-2021-36965
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVE-2022-21848
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2022-21863
Windows StateRepository API Server file Elevation of Privilege Vulnerability
CVE-2022-21889
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2022-24487
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
CVE-2022-26827
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
CVE-2022-41118
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2023-36882
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2018-8547
A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Active Directory Federation Services XSS Vulnerability." This a...
CVE-2019-0697
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
CVE-2019-0792
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.
CVE-2019-0848
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.
CVE-2021-31193
Windows SSDP Service Elevation of Privilege Vulnerability
CVE-2022-21897
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-29121
Windows WLAN AutoConfig Service Denial of Service Vulnerability
CVE-2022-34699
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-34702
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-34727
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41048
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21757
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
CVE-2023-24939
Server for NFS Denial of Service Vulnerability
CVE-2024-38144
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2019-0688
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.
CVE-2019-0690
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.
CVE-2019-0732
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0765
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.
CVE-2019-0786
An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.
CVE-2021-34454
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34530
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-36926
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability