Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2022/01/11 9:15 p.m.137 views

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS7.9AI score0.08945EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.137 views

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00559EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.137 views

CVE-2022-21889

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.10382EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.137 views

CVE-2022-24487

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.05562EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.137 views

CVE-2022-26827

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00149EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.137 views

CVE-2022-41118

Windows Scripting Languages Remote Code Execution Vulnerability

7.5CVSS8.1AI score0.00088EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.136 views

CVE-2018-0967

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

6.3CVSS6.3AI score0.22945EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.136 views

CVE-2018-1012

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.57782EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.136 views

CVE-2018-8547

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Active Directory Federation Services XSS Vulnerability." This a...

5.4CVSS6.5AI score0.00427EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.136 views

CVE-2019-0578

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.136 views

CVE-2019-0620

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

8.4CVSS8.1AI score0.00508EPSS
CVE
CVE
added 2019/04/09 12:29 a.m.136 views

CVE-2019-0697

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.

9.8CVSS9.5AI score0.46058EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.136 views

CVE-2019-0792

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.136 views

CVE-2019-0848

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.

5.5CVSS6AI score0.00996EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.136 views

CVE-2019-0904

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8AI score0.10107EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.136 views

CVE-2020-16887

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker coul...

7.8CVSS8.1AI score0.00717EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.136 views

CVE-2020-16924

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.3AI score0.10395EPSS
CVE
CVE
added 2020/12/10 12:15 a.m.136 views

CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.79839EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.136 views

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00383EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.136 views

CVE-2022-21897

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00632EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.136 views

CVE-2022-29121

Windows WLAN AutoConfig Service Denial of Service Vulnerability

6.5CVSS7.8AI score0.00409EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.136 views

CVE-2022-34699

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.27572EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.136 views

CVE-2022-34702

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.0018EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.136 views

CVE-2022-34727

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.02358EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.136 views

CVE-2022-41048

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02096EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.136 views

CVE-2023-21757

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

7.5CVSS7.5AI score0.05106EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.135 views

CVE-2016-7212

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka "Windows Remote Code ...

9.3CVSS8AI score0.40707EPSS
CVE
CVE
added 2019/04/08 11:29 p.m.135 views

CVE-2019-0614

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0774.

6.5CVSS6.7AI score0.25343EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.135 views

CVE-2019-0688

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.

7.5CVSS7.3AI score0.10301EPSS
CVE
CVE
added 2019/04/09 12:29 a.m.135 views

CVE-2019-0690

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.

6.8CVSS6.9AI score0.00375EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.135 views

CVE-2019-0732

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.

7.8CVSS7.9AI score0.01235EPSS
CVE
CVE
added 2019/04/09 2:29 a.m.135 views

CVE-2019-0765

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.19221EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.135 views

CVE-2019-0786

An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

9.8CVSS8.3AI score0.0993EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.135 views

CVE-2019-1225

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system.To exploit this vulnerability, an attacker would have to co...

7.5CVSS6.9AI score0.05847EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.135 views

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.To exploit this vulnerability, an attacker would first h...

7.8CVSS8AI score0.00507EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.135 views

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.135 views

CVE-2021-34454

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00437EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.135 views

CVE-2021-34530

Windows Graphics Component Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.02062EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.135 views

CVE-2021-36926

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

7.5CVSS8.3AI score0.10619EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.135 views

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00433EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.135 views

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability

9.3CVSS8AI score0.01261EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.135 views

CVE-2022-22710

Windows Common Log File System Driver Denial of Service Vulnerability

5.5CVSS6.3AI score0.00361EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.135 views

CVE-2022-26786

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00408EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.135 views

CVE-2022-37974

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

6.5CVSS6.4AI score0.08051EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.135 views

CVE-2022-38027

Windows Storage Elevation of Privilege Vulnerability

7CVSS7.6AI score0.00107EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.135 views

CVE-2022-38031

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.0384EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.135 views

CVE-2023-23423

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00336EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.134 views

CVE-2017-0283

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Busi...

9.3CVSS6.4AI score0.55105EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.134 views

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows ...

7.8CVSS6.5AI score0.00512EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.134 views

CVE-2019-0885

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

9.3CVSS7.7AI score0.19496EPSS
Total number of security vulnerabilities3000