Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2016/11/10 6:59 a.m.86 views

CVE-2016-7184

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted appl...

9.3CVSS7.5AI score0.1385EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.86 views

CVE-2017-0076

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "H...

5.4CVSS5.2AI score0.00651EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.86 views

CVE-2017-0097

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "H...

5.4CVSS5.2AI score0.00651EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.86 views

CVE-2017-0183

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V D...

6.3CVSS5.9AI score0.00584EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.86 views

CVE-2017-0274

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS
CVE
CVE
added 2017/06/29 1:29 p.m.86 views

CVE-2017-8576

The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability."

7CVSS5.6AI score0.01277EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.86 views

CVE-2017-8727

Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Windows Text Services Fram...

7.6CVSS8.6AI score0.20533EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.86 views

CVE-2019-1173

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specia...

7CVSS7.2AI score0.00304EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.86 views

CVE-2019-1227

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...

5.5CVSS5.3AI score0.00902EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.86 views

CVE-2019-1254

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.0059EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.86 views

CVE-2019-1292

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

6.8CVSS6.2AI score0.03676EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.86 views

CVE-2019-1334

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1345.

5.5CVSS6.5AI score0.07944EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.86 views

CVE-2019-1382

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'.

5.5CVSS7AI score0.00349EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.86 views

CVE-2019-1399

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310.

6.2CVSS7.1AI score0.00983EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0776

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique fro...

7.8CVSS8.7AI score0.00495EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0777

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0866, CVE-2...

7.8CVSS7.6AI score0.00538EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0778

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0802, CVE-2020-0803, CVE-2020-0804, CVE-2020-0845.

7.8CVSS8.1AI score0.00549EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.86 views

CVE-2020-0790

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.This vulnerability by itself does not allow arbitrary code ex...

7.8CVSS8.4AI score0.00512EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0793

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00377EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.86 views

CVE-2020-0797

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0866, CVE-2...

7.8CVSS7.6AI score0.00538EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.86 views

CVE-2020-1006

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017.

7.8CVSS7.8AI score0.00397EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.86 views

CVE-2020-1067

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.

9CVSS8.9AI score0.35019EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.86 views

CVE-2020-1114

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.

7.8CVSS8.3AI score0.00278EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.86 views

CVE-2020-1222

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique fro...

7.8CVSS8.2AI score0.15841EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.86 views

CVE-2020-1278

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257, CVE-2020-1293.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.86 views

CVE-2020-1291

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.13831EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1344

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369.

7.8CVSS8.1AI score0.12863EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1359

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.

7.8CVSS8.5AI score0.00513EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.86 views

CVE-2020-1365

An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID i...

7.8CVSS8.6AI score0.00827EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17007

Windows Error Reporting Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00311EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17013

Win32k Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00541EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.86 views

CVE-2020-17028

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00514EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.86 views

CVE-2021-1681

Windows WalletService Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00187EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.86 views

CVE-2021-1691

Windows Hyper-V Denial of Service Vulnerability

7.7CVSS7.5AI score0.00991EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.86 views

CVE-2021-28317

Microsoft Windows Codecs Library Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00448EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.86 views

CVE-2022-33645

Windows TCP/IP Driver Denial of Service Vulnerability

7.5CVSS7.9AI score0.04971EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-34712

Windows Defender Credential Guard Information Disclosure Vulnerability

5.5CVSS7AI score0.0476EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-35760

Microsoft ATA Port Driver Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.01084EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.86 views

CVE-2022-35793

Windows Print Spooler Elevation of Privilege Vulnerability

7.3CVSS8.2AI score0.0705EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.86 views

CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.07013EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.86 views

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00259EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.86 views

CVE-2023-21701

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

7.5CVSS7.4AI score0.01047EPSS
CVE
CVE
added 2015/08/15 12:59 a.m.85 views

CVE-2015-2456

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, S...

9.3CVSS7.3AI score0.6028EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.85 views

CVE-2016-3287

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure Boot protection mechanism by leveraging administrative access to install a crafted policy, aka "Secure Boot Security Feature Bypass."

4.4CVSS4.6AI score0.00155EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.85 views

CVE-2016-7218

Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a cr...

4.7CVSS5AI score0.01428EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.85 views

CVE-2017-0081

The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is differ...

7.8CVSS6AI score0.06734EPSS
CVE
CVE
added 2017/08/08 9:29 p.m.85 views

CVE-2017-0250

Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to buffer overflow, aka "Microsoft JET Databa...

9.3CVSS8.4AI score0.23522EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.85 views

CVE-2017-11783

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka "Windows Elevation of Privilege Vulnerability".

7CVSS7.9AI score0.07572EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.85 views

CVE-2018-8253

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.

4.6CVSS6.3AI score0.01545EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.85 views

CVE-2019-1251

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1245.

5.5CVSS6.2AI score0.27638EPSS
Total number of security vulnerabilities3000