972 matches found
CVE-2022-26797
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2020-1459
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation."To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application.The se...
CVE-2020-1592
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...
CVE-2020-16935
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...
CVE-2020-17000
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2021-24081
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2021-24103
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-28323
Windows DNS Information Disclosure Vulnerability
CVE-2022-26807
Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2020-16961
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16968
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user right...
CVE-2020-17025
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17036
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
CVE-2021-1702
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
CVE-2021-1731
PFX Encryption Security Feature Bypass Vulnerability
CVE-2021-28442
Windows TCP/IP Information Disclosure Vulnerability
CVE-2020-0911
An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.An attacker could exploit this vulnerability by running a specially crafted a...
CVE-2020-1115
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have ...
CVE-2020-17010
Win32k Elevation of Privilege Vulnerability
CVE-2020-17011
Windows Port Class Library Elevation of Privilege Vulnerability
CVE-2020-17047
Windows Network File System Denial of Service Vulnerability
CVE-2020-17069
Windows NDIS Information Disclosure Vulnerability
CVE-2021-1659
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1689
Windows Multipoint Management Elevation of Privilege Vulnerability
CVE-2021-27094
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
CVE-2021-28443
Windows Console Driver Denial of Service Vulnerability
CVE-2021-43222
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2022-21998
Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22717
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-26916
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2020-0782
An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog.To exploit this vulnerability, an attacker would first have to log on ...
CVE-2020-17032
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17037
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1661
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1662
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-1683
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...
CVE-2021-1710
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-1734
Windows Remote Procedure Call Information Disclosure Vulnerability
CVE-2021-27086
Windows Services and Controller App Elevation of Privilege Vulnerability
CVE-2021-36973
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVE-2020-0838
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafte...
CVE-2020-0890
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtua...
CVE-2020-1122
An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.An attacker could exploit this vulnerability by running a specially crafte...
CVE-2020-1598
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; v...
CVE-2020-16876
An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code e...
CVE-2020-17034
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2021-1652
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1672
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVE-2021-1688
Windows CSC Service Elevation of Privilege Vulnerability