3039 matches found
CVE-2020-0734
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0681.
CVE-2020-0849
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896.
CVE-2020-0865
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0866, CVE-2...
CVE-2020-0888
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0784.
CVE-2020-0958
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0957.
CVE-2020-1094
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.
CVE-2020-1153
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVE-2020-1296
A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & feedback Information Disclosure Vulnerability'.
CVE-2020-1407
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1401.
CVE-2021-36973
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVE-2022-35770
Windows NTLM Spoofing Vulnerability
CVE-2022-37997
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44680
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-44682
Windows Hyper-V Denial of Service Vulnerability
CVE-2023-33167
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-35357
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30065
Windows Themes Denial of Service Vulnerability
CVE-2024-30082
Win32k Elevation of Privilege Vulnerability
CVE-2024-30094
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38101
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38116
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-43452
Windows Registry Elevation of Privilege Vulnerability
CVE-2025-26635
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
CVE-2025-27727
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-48799
Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2019-0733
A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.
CVE-2019-1090
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrlvr.dll Elevation of Privilege Vulnerability'.
CVE-2019-1247
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1248,...
CVE-2020-0771
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-20...
CVE-2020-0952
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
CVE-2020-0955
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure in CPU Memory Access'.
CVE-2020-1117
A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'.
CVE-2020-1176
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1175.
CVE-2020-1231
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1304, CVE-2020-1306, CVE-2020-133...
CVE-2020-1271
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'.
CVE-2020-1302
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...
CVE-2020-1348
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
CVE-2022-26795
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-38030
Windows USB Serial Driver Information Disclosure Vulnerability
CVE-2022-38032
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVE-2023-33174
Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-35318
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-35319
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2024-30034
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2024-37969
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-38028
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38085
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38191
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVE-2024-43644
Windows Client-Side Caching Elevation of Privilege Vulnerability