CVE-2021-41367

NTFS Elevation of Privilege Vulnerability

CVE-2022-26798

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-29131

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-35764

Storage Spaces Direct Elevation of Privilege Vulnerability

CVE-2023-24862

Windows Secure Channel Denial of Service Vulnerability

CVE-2023-24907

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-35365

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2023-36704

Windows Setup Files Cleanup Remote Code Execution Vulnerability

CVE-2023-38254

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-30050

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38140

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

CVE-2025-21204

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVE-2025-21329

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2018-8514

An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2...

CVE-2019-0659

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.

CVE-2019-0838

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839.

CVE-2019-1343

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347.

CVE-2019-1453

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.

CVE-2019-1467

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1466.

CVE-2020-1112

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

CVE-2021-31976

Server for NFS Information Disclosure Vulnerability

CVE-2021-34496

Windows GDI Information Disclosure Vulnerability

CVE-2021-34512

Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2021-40462

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

CVE-2022-30155

Windows Kernel Denial of Service Vulnerability

CVE-2022-41053

Windows Kerberos Denial of Service Vulnerability

CVE-2022-41057

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2022-41109

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-21760

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21774

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability

CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-28224

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

CVE-2023-28225

Windows NTLM Elevation of Privilege Vulnerability

CVE-2023-28235

Windows Lock Screen Security Feature Bypass Vulnerability

CVE-2023-29364

Windows Authentication Elevation of Privilege Vulnerability

CVE-2023-36909

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2025-21213

Secure Boot Security Feature Bypass Vulnerability

CVE-2018-8417

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

CVE-2019-0600

An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.

CVE-2019-0627

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.

CVE-2019-0631

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0632.

CVE-2020-1286

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'.

CVE-2021-33784

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

CVE-2021-41332

Windows Print Spooler Information Disclosure Vulnerability

CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

CVE-2022-21960

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVE-2023-23402

Windows Media Remote Code Execution Vulnerability