480 matches found
CVE-2021-1692
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-1699
Windows (modem.sys) Information Disclosure Vulnerability
CVE-2021-24083
Windows Address Book Remote Code Execution Vulnerability
CVE-2021-24102
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-27092
Azure AD Web Sign-in Security Feature Bypass Vulnerability
CVE-2021-28322
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2020-0997
<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user ri...
CVE-2020-1485
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an aut...
CVE-2020-16877
<p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions.</p><p>To exploit this vulnerability, an a...
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2020-17097
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2021-26415
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-27096
NTFS Elevation of Privilege Vulnerability
CVE-2021-28315
Windows Media Video Decoder Remote Code Execution Vulnerability
CVE-2021-28318
Windows GDI+ Information Disclosure Vulnerability
CVE-2020-0648
<p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.</p><p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate priv...
CVE-2020-16974
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p><p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privi...
CVE-2020-17038
Win32k Elevation of Privilege Vulnerability
CVE-2020-17055
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17139
Windows Overlay Filter Security Feature Bypass Vulnerability
CVE-2021-1650
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
CVE-2021-1654
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2021-1695
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-1696
Windows Graphics Component Information Disclosure Vulnerability
CVE-2021-24079
Windows Backup Engine Information Disclosure Vulnerability
CVE-2021-28349
Windows GDI+ Remote Code Execution Vulnerability
CVE-2020-1091
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.</p><p>There are multiple ways an attacker could ...
CVE-2020-1098
<p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p><p>To exploit this vulnerability, an attacker would first have to ...
CVE-2020-1547
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...
CVE-2020-16895
<p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status.</p><p>To exploit this vulnerability, an attacker would fir...
CVE-2020-16964
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2021-1697
Windows InstallService Elevation of Privilege Vulnerability
CVE-2021-28437
Windows Installer Information Disclosure Vulnerability
CVE-2021-28445
Windows Network File System Remote Code Execution Vulnerability
CVE-2020-1459
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation."To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application.The se...
CVE-2020-1592
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p><p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain inform...
CVE-2020-16935
<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p><p>To exploit this vulnerability, an attacker would first have to log on to the syste...
CVE-2020-17000
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2021-24081
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2021-24103
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-28323
Windows DNS Information Disclosure Vulnerability
CVE-2020-16961
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2020-16968
<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user ri...
CVE-2020-17025
Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-17036
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
CVE-2021-1702
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
CVE-2021-1731
PFX Encryption Security Feature Bypass Vulnerability
CVE-2021-28442
Windows TCP/IP Information Disclosure Vulnerability
CVE-2020-0911
<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.</p><p>An attacker could exploit this vulnerability by running a specially...