Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2020/09/11 5:15 p.m.134 views

CVE-2020-1034

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially cra...

7.8CVSS7.5AI score0.25825EPSS
CVE
CVE
added 2020/12/10 12:15 a.m.134 views

CVE-2020-17140

Windows SMB Information Disclosure Vulnerability

8.1CVSS6.8AI score0.19706EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.134 views

CVE-2021-31165

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0033EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.134 views

CVE-2021-34508

Windows Kernel Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.03232EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.134 views

CVE-2021-36932

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

7.5CVSS8.3AI score0.10619EPSS
CVE
CVE
added 2021/11/10 1:18 a.m.134 views

CVE-2021-38631

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

4.4CVSS6.3AI score0.00332EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.134 views

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.00146EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.134 views

CVE-2022-21901

Windows Hyper-V Elevation of Privilege Vulnerability

9CVSS8.6AI score0.00551EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.134 views

CVE-2022-30205

Windows Group Policy Elevation of Privilege Vulnerability

6.6CVSS7.4AI score0.00296EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.134 views

CVE-2022-30225

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

7.1CVSS7.7AI score0.00464EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.134 views

CVE-2023-21822

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00711EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.134 views

CVE-2023-24858

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

7.5CVSS7.2AI score0.03958EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.133 views

CVE-2019-0575

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.133 views

CVE-2019-0618

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.

9.3CVSS9.4AI score0.58174EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.133 views

CVE-2019-0623

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

7.8CVSS8.4AI score0.31087EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.133 views

CVE-2019-0794

A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.27063EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.133 views

CVE-2019-0853

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.09874EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.133 views

CVE-2019-0900

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.133 views

CVE-2019-0906

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8AI score0.09822EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.133 views

CVE-2019-0986

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.To exploit this vulnerability, an attacker would first have to ...

7.1CVSS7.2AI score0.03118EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.133 views

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0037EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.133 views

CVE-2019-1235

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.00128EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.133 views

CVE-2020-1417

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

7.8CVSS7AI score0.01148EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.133 views

CVE-2020-1519

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The securit...

7.8CVSS8.6AI score0.00514EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.133 views

CVE-2021-31182

Microsoft Bluetooth Driver Spoofing Vulnerability

7.1CVSS8AI score0.00466EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.133 views

CVE-2021-34461

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00317EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.133 views

CVE-2022-21843

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

7.5CVSS8.5AI score0.11471EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.133 views

CVE-2022-21883

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.06455EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.133 views

CVE-2022-26936

Windows Server Service Information Disclosure Vulnerability

6.5CVSS7.6AI score0.07335EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.133 views

CVE-2023-36911

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.03462EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.132 views

CVE-2018-8349

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2...

9.3CVSS7.3AI score0.07716EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.132 views

CVE-2018-8415

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 201...

7.8CVSS7.2AI score0.00234EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.132 views

CVE-2019-0580

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.132 views

CVE-2019-0628

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00549EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.132 views

CVE-2019-0662

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618.

9.3CVSS9.4AI score0.58174EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.132 views

CVE-2019-1053

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox.To exploit this vulnerability, an attacker would require unprivileged execution on the vi...

8.8CVSS7.2AI score0.00362EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.132 views

CVE-2019-1150

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS8.7AI score0.27004EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.132 views

CVE-2019-1274

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.

5.5CVSS5.9AI score0.0059EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.132 views

CVE-2020-0607

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.175EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.132 views

CVE-2020-0608

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00978EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.132 views

CVE-2020-0746

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.1459EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.132 views

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

7.5CVSS8.3AI score0.13884EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.132 views

CVE-2021-40465

Windows Text Shaping Remote Code Execution Vulnerability

7.8CVSS8.2AI score0.0299EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.132 views

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00414EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.132 views

CVE-2022-21963

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

7.2CVSS8AI score0.01699EPSS
CVE
CVE
added 2022/07/12 11:15 p.m.132 views

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

7.5CVSS7.8AI score0.00619EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.132 views

CVE-2022-26793

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00394EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.132 views

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00279EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.132 views

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability

7.5CVSS7AI score0.02658EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.131 views

CVE-2017-0170

Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka "Windows ...

6.5CVSS6.1AI score0.18028EPSS
Total number of security vulnerabilities3000