2952 matches found
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2023-36719
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVE-2022-24491
Windows Network File System Remote Code Execution Vulnerability
CVE-2019-1006
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
CVE-2020-0611
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
CVE-2022-24528
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2024-30040
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2022-24500
Windows SMB Remote Code Execution Vulnerability
CVE-2024-21438
Microsoft AllJoyn API Denial of Service Vulnerability
CVE-2022-21977
Media Foundation Information Disclosure Vulnerability
CVE-2024-21416
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2018-8641
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wind...
CVE-2022-22049
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-24547
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-21972
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2025-33053
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
CVE-2020-1048
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
CVE-2024-26229
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2022-24545
Windows Kerberos Remote Code Execution Vulnerability
CVE-2023-24023
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
CVE-2023-28293
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-26424
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2022-26931
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2023-36405
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26207
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2019-0685
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859.
CVE-2022-24497
Windows Network File System Remote Code Execution Vulnerability
CVE-2018-8639
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...
CVE-2021-38633
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-20652
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2022-23284
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-1018
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
CVE-2023-28250
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2022-30170
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVE-2024-38118
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2024-38193
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-21437
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-36963
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21729
Remote Procedure Call Runtime Information Disclosure Vulnerability
CVE-2024-38213
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-23293
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2023-21549
Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2022-30138
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-21433
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2019-1073
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.
CVE-2024-26166
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2021-26432
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2024-21358
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21372
Windows OLE Remote Code Execution Vulnerability
CVE-2024-26162
Microsoft ODBC Driver Remote Code Execution Vulnerability