Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2020/04/15 3:15 p.m.97 views

CVE-2020-0960

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.97 views

CVE-2020-0964

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.29439EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.97 views

CVE-2020-0995

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.97 views

CVE-2020-1091

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.There are multiple ways an attacker could exploit th...

6.5CVSS6.9AI score0.22282EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.97 views

CVE-2020-1098

An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit this vulnerability, an attacker would first have to log on to ...

7.8CVSS7.7AI score0.00502EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.97 views

CVE-2020-1160

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.00661EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.97 views

CVE-2020-1162

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS8AI score0.00681EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.97 views

CVE-2020-1282

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306, CVE-2020-133...

7.8CVSS7.7AI score0.12134EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.97 views

CVE-2020-1463

An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.97 views

CVE-2020-1547

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00378EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.97 views

CVE-2020-16895

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status.To exploit this vulnerability, an attacker would first have to...

7.8CVSS8.1AI score0.00744EPSS
CVE
CVE
added 2020/12/10 12:15 a.m.97 views

CVE-2020-16964

Windows Backup Engine Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0137EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.97 views

CVE-2021-1697

Windows InstallService Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.97 views

CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

5.5CVSS6.7AI score0.00448EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.97 views

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

8.8CVSS8.5AI score0.17466EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.97 views

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00249EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.97 views

CVE-2021-38637

Windows Storage Information Disclosure Vulnerability

5.5CVSS6.1AI score0.00319EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.97 views

CVE-2021-41346

Console Window Host Security Feature Bypass Vulnerability

7.8CVSS5.6AI score0.00206EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.97 views

CVE-2022-26797

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0036EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.97 views

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.02358EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.97 views

CVE-2022-35833

Windows Secure Channel Denial of Service Vulnerability

7.5CVSS8.4AI score0.03165EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.97 views

CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.1357EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.97 views

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

6.2CVSS5.8AI score0.00364EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.97 views

CVE-2023-36905

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

7.5CVSS7AI score0.03753EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.97 views

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

7.5CVSS7.5AI score0.00443EPSS
CVE
CVE
added 2016/04/12 11:59 p.m.96 views

CVE-2016-0150

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."

7.8CVSS6.7AI score0.43281EPSS
CVE
CVE
added 2016/09/14 10:59 a.m.96 views

CVE-2016-3371

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive information via a c...

5.5CVSS5.6AI score0.30942EPSS
CVE
CVE
added 2016/09/14 10:59 a.m.96 views

CVE-2016-3373

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly implement registry access control, which allows local users to obtain sensitive accou...

5.5CVSS5.6AI score0.10967EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.96 views

CVE-2017-0056

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win3...

7.8CVSS6AI score0.06734EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.96 views

CVE-2018-0887

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Win...

5.5CVSS5AI score0.02612EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.96 views

CVE-2018-8200

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. T...

5.3CVSS6.7AI score0.00231EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-0965

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

7.7CVSS8.6AI score0.00681EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.96 views

CVE-2019-1022

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS7.8AI score0.00299EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.96 views

CVE-2019-1060

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.

9.3CVSS9.3AI score0.22645EPSS
CVE
CVE
added 2019/07/15 7:15 p.m.96 views

CVE-2019-1097

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.

5.5CVSS5.8AI score0.0143EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-1163

A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.To exploit the vulnerability, an attacker could modify a signed CAB file and...

5.5CVSS7.4AI score0.02237EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.96 views

CVE-2019-1177

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted ...

7CVSS7.3AI score0.00196EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.96 views

CVE-2019-1321

An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL), aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00397EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.96 views

CVE-2019-1391

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207.

5.5CVSS7.2AI score0.00471EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.96 views

CVE-2020-0709

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.

7.8CVSS7.8AI score0.00538EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.96 views

CVE-2020-0739

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0737.

7.8CVSS8AI score0.00377EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.96 views

CVE-2020-0784

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.

7.8CVSS8.1AI score0.00372EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.96 views

CVE-2020-0803

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0804, CVE-2020-0845.

7.8CVSS8.1AI score0.00549EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.96 views

CVE-2020-0988

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0992, CVE-2020-0994,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.96 views

CVE-2020-1253

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1310.

7.2CVSS7AI score0.00798EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.96 views

CVE-2020-1390

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.96 views

CVE-2020-1459

An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation."To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application.The se...

7.5CVSS7.1AI score0.06087EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.96 views

CVE-2020-1592

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...

4.4CVSS4.2AI score0.00433EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.96 views

CVE-2020-16935

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit this vulnerability, an attacker would first have to log on to the system. An atta...

7.8CVSS8.2AI score0.00993EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.96 views

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00542EPSS
Total number of security vulnerabilities3000