Lucene search

K
MicrosoftWindows 10

2979 matches found

CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0793

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00377EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0797

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0866, CVE-2...

7.8CVSS7.6AI score0.00538EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.86 views

CVE-2020-1006

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017.

7.8CVSS7.8AI score0.00397EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.86 views

CVE-2020-1052

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafte...

7.8CVSS8.1AI score0.00502EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.86 views

CVE-2020-1067

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.

9CVSS8.9AI score0.35019EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.86 views

CVE-2020-1114

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.

7.8CVSS8.3AI score0.00278EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.86 views

CVE-2020-1222

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique fro...

7.8CVSS8.2AI score0.15841EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.86 views

CVE-2020-1278

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1344

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369.

7.8CVSS8.1AI score0.12863EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1359

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.

7.8CVSS8.5AI score0.00378EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1365

An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID i...

7.8CVSS8.6AI score0.0061EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17007

Windows Error Reporting Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00311EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17013

Win32k Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00541EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17028

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00514EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.86 views

CVE-2021-1681

Windows WalletService Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00187EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.86 views

CVE-2021-1691

Windows Hyper-V Denial of Service Vulnerability

7.7CVSS7.5AI score0.00991EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.86 views

CVE-2021-28317

Microsoft Windows Codecs Library Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00448EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.86 views

CVE-2022-33645

Windows TCP/IP Driver Denial of Service Vulnerability

7.5CVSS7.9AI score0.04971EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-34712

Windows Defender Credential Guard Information Disclosure Vulnerability

5.5CVSS7AI score0.04234EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-35760

Microsoft ATA Port Driver Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.01118EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-35793

Windows Print Spooler Elevation of Privilege Vulnerability

7.3CVSS8.2AI score0.06116EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.86 views

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00272EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.86 views

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

7.5CVSS7.4AI score0.01047EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.85 views

CVE-2016-3287

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure Boot protection mechanism by leveraging administrative access to install a crafted policy, aka "Secure Boot Security Feature Bypass."

4.4CVSS4.6AI score0.00155EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.85 views

CVE-2016-7218

Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a cr...

4.7CVSS5AI score0.01428EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.85 views

CVE-2017-0081

The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is differ...

7.8CVSS6AI score0.06734EPSS
CVE
CVE
added 2017/08/08 9:29 p.m.85 views

CVE-2017-0250

Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to buffer overflow, aka "Microsoft JET Databa...

9.3CVSS8.4AI score0.23522EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.85 views

CVE-2017-11783

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka "Windows Elevation of Privilege Vulnerability".

7CVSS7.9AI score0.07572EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.85 views

CVE-2018-8253

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.

4.6CVSS6.3AI score0.01545EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.85 views

CVE-2019-1251

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245.

5.5CVSS6.2AI score0.27638EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.85 views

CVE-2019-1440

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1436.

5.5CVSS6.4AI score0.01624EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.85 views

CVE-2020-0675

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addre...

5.5CVSS5.2AI score0.00996EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.85 views

CVE-2020-0714

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00392EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.85 views

CVE-2020-0766

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security...

7.8CVSS8.1AI score0.00502EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.85 views

CVE-2020-0773

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This ...

7.8CVSS8.2AI score0.00656EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.85 views

CVE-2020-0845

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0803, CVE-2020-0804.

7.8CVSS8.1AI score0.00549EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.85 views

CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolv...

7.5CVSS8.1AI score0.11215EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.85 views

CVE-2020-0934

An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0983...

7.8CVSS7.9AI score0.11588EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.85 views

CVE-2020-0948

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.

9.3CVSS8.7AI score0.2125EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.85 views

CVE-2020-0993

A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnerability'.

6.8CVSS6.9AI score0.11053EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.85 views

CVE-2020-1005

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-0987.

5.5CVSS6.2AI score0.0176EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.85 views

CVE-2020-1029

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-0944.

7.8CVSS7.7AI score0.00538EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.85 views

CVE-2020-1030

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; ...

7.8CVSS8.1AI score0.02396EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.85 views

CVE-2020-1123

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1084.

5.5CVSS6.9AI score0.00266EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.85 views

CVE-2020-1304

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1306, CVE-2020-133...

7.8CVSS7.7AI score0.12134EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.85 views

CVE-2020-1324

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS8AI score0.00502EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.85 views

CVE-2020-1368

An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.85 views

CVE-2020-1394

An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.85 views

CVE-2020-1399

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-141...

7.8CVSS7.7AI score0.00378EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.85 views

CVE-2020-16976

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.00542EPSS
Total number of security vulnerabilities2979