CVE-2025-21299

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2025-21314

Windows SmartScreen Spoofing Vulnerability

CVE-2025-21378

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2025-26641

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

CVE-2025-26673

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

CVE-2025-27467

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.

CVE-2019-1379

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1383, CVE-2019-1417.

CVE-2019-1418

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

CVE-2019-1420

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1422, CVE-2019-1423.

CVE-2020-0699

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0962.

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Info...

CVE-2020-0820

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.

CVE-2020-1188

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020...

CVE-2020-1386

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.

CVE-2020-1395

An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.

CVE-2023-35325

Windows Print Spooler Information Disclosure Vulnerability

CVE-2024-38119

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVE-2024-43528

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2024-43537

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVE-2024-43553

NT OS Kernel Elevation of Privilege Vulnerability

CVE-2024-43565

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-43621

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21227

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21243

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21246

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21277

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21374

Windows CSC Service Information Disclosure Vulnerability

CVE-2025-24069

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2020-0750

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-...

CVE-2020-0882

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880.

CVE-2020-1121

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111, CVE-2020-1165, CVE-2020-1166.

CVE-2020-1124

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020...

CVE-2020-1156

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-115...

CVE-2020-1164

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-115...

CVE-2020-1363

An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Picker Platform Elevation of Privilege Vulnerability'.

CVE-2020-1364

A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulnerability'.

CVE-2021-43246

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-38241

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVE-2024-43524

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-43551

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-43570

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-49078

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

CVE-2025-21184

Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21258

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21268

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2025-21284

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVE-2025-21306

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21323

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2018-8638

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 10, Windows Server 2019.