CVE-2013-3900

Why is Microsoft republishing a CVE from 2013?We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format i...

CVE-2021-40444

<p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.</p><p>An attacker could craft a malicious...

CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, l...

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could e...

CVE-2022-26925

Windows LSA Spoofing Vulnerability

CVE-2021-33742

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2021-33739

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2022-21990

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-24528

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-24500

Windows SMB Remote Code Execution Vulnerability

CVE-2022-24545

Windows Kerberos Remote Code Execution Vulnerability

CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

CVE-2022-24533

Remote Desktop Protocol Remote Code Execution Vulnerability

CVE-2022-22019

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-23294

Windows Event Tracing Remote Code Execution Vulnerability

CVE-2020-16891

<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could c...

CVE-2021-34535

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-22013

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-21893

Remote Desktop Protocol Remote Code Execution Vulnerability

CVE-2021-34480

Scripting Engine Memory Corruption Vulnerability

CVE-2021-36947

Windows Print Spooler Remote Code Execution Vulnerability

CVE-2022-21984

Windows DNS Server Remote Code Execution Vulnerability

CVE-2020-16898

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p><p>To exploit this vulnerability,...

CVE-2021-28455

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

CVE-2022-29139

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2021-38666

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-29141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2021-34447

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-26927

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2021-33750

Windows DNS Snap-in Remote Code Execution Vulnerability

CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

CVE-2020-1509

An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...

CVE-2021-33749

Windows DNS Snap-in Remote Code Execution Vulnerability

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2021-26865

Windows Container Execution Agent Elevation of Privilege Vulnerability

CVE-2021-33756

Windows DNS Snap-in Remote Code Execution Vulnerability

CVE-2021-34492

Windows Certificate Spoofing Vulnerability

CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2022-29137

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-24487

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2020-17140

Windows SMB Information Disclosure Vulnerability

CVE-2021-34508

Windows Kernel Remote Code Execution Vulnerability

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability