Lucene search

K
MicrosoftWindows 10

2979 matches found

CVE
CVE
added 2020/11/11 7:15 a.m.85 views

CVE-2020-17024

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00428EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.85 views

CVE-2020-17113

Windows Camera Codec Information Disclosure Vulnerability

5.5CVSS6.5AI score0.01225EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.85 views

CVE-2021-24091

Windows Camera Codec Pack Remote Code Execution Vulnerability

8.8CVSS8.6AI score0.07013EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.85 views

CVE-2021-26900

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.07071EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.85 views

CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability

6.5CVSS6.9AI score0.09551EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.85 views

CVE-2021-43216

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

6.8CVSS7.5AI score0.13735EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.85 views

CVE-2021-43238

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00305EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.85 views

CVE-2023-21702

Windows iSCSI Service Denial of Service Vulnerability

7.5CVSS7.5AI score0.02919EPSS
CVE
CVE
added 2016/10/14 2:59 a.m.84 views

CVE-2016-0075

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Pr...

5.5CVSS5.1AI score0.05869EPSS
CVE
CVE
added 2016/08/09 9:59 p.m.84 views

CVE-2016-3299

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hijack network traffic or bypass intended Enhanced Protected Mode (EPM) or application container prote...

5.3CVSS7AI score0.07344EPSS
CVE
CVE
added 2016/08/09 9:59 p.m.84 views

CVE-2016-3319

The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."

9.3CVSS7.3AI score0.37191EPSS
CVE
CVE
added 2016/12/20 6:59 a.m.84 views

CVE-2016-7219

The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, a...

5.5CVSS5.4AI score0.01469EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.84 views

CVE-2017-0246

The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application or in Window...

7CVSS7.2AI score0.16582EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.84 views

CVE-2017-0300

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.84 views

CVE-2017-11817

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly vali...

4.7CVSS6.1AI score0.03549EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.84 views

CVE-2017-8581

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka ...

7CVSS6.9AI score0.12071EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.84 views

CVE-2017-8587

Windows Explorer in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511 allows a denial of service vulnerability when it attempts to open a non-existent file, aka "Windows Explorer Denial of Service Vulnerability".

6.5CVSS6.2AI score0.16489EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.84 views

CVE-2017-8677

The Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly discloses kernel ...

5.5CVSS5.3AI score0.26895EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.84 views

CVE-2019-0550

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. Th...

8.4CVSS7.9AI score0.00598EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.84 views

CVE-2019-0886

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

6.8CVSS6.2AI score0.0078EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.84 views

CVE-2019-1223

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.To e...

7.5CVSS7.6AI score0.185EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.84 views

CVE-2020-0680

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0682.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.84 views

CVE-2020-0781

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783.

7.8CVSS8.5AI score0.00538EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.84 views

CVE-2020-0799

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka 'Windows Kernel Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.00618EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.84 views

CVE-2020-0853

An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.

6.5CVSS7.1AI score0.27243EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.84 views

CVE-2020-0869

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.

8.8CVSS8.7AI score0.17369EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.84 views

CVE-2020-0989

An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could bypass access restrictions to read files.To exploit this vulnerability, an attacker would first have t...

5.5CVSS6.4AI score0.00913EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.84 views

CVE-2020-1014

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0047EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.84 views

CVE-2020-1116

An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.00505EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.84 views

CVE-2020-1238

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239.

8.8CVSS8.3AI score0.30475EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.84 views

CVE-2020-1258

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

7.2CVSS7.4AI score0.00589EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.84 views

CVE-2020-1268

An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00881EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.84 views

CVE-2020-1361

An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.

5.5CVSS6.9AI score0.00965EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.84 views

CVE-2020-1385

An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.84 views

CVE-2020-1392

An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.84 views

CVE-2020-1397

An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.

6.5CVSS7.1AI score0.2819EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.84 views

CVE-2020-1415

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-141...

7.8CVSS7.7AI score0.00378EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.84 views

CVE-2021-24098

Windows Console Driver Denial of Service Vulnerability

5.5CVSS7.2AI score0.02685EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.84 views

CVE-2021-26898

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0045EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.84 views

CVE-2021-28320

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00681EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.84 views

CVE-2021-43231

Windows NTFS Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00542EPSS
CVE
CVE
added 2015/12/09 11:59 a.m.83 views

CVE-2015-6107

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, ...

9.3CVSS7.5AI score0.49407EPSS
CVE
CVE
added 2016/05/11 1:59 a.m.83 views

CVE-2016-0180

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles symbolic links, which allows local users to gain privileges via a crafted application, aka "Windows Ker...

7.8CVSS7.3AI score0.01498EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.83 views

CVE-2016-3220

atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "ATMFD.d...

7.8CVSS6.1AI score0.14219EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.83 views

CVE-2017-0075

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote...

7.6CVSS6.9AI score0.04458EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.83 views

CVE-2017-11829

Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.

5.5CVSS7.1AI score0.02283EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.83 views

CVE-2017-11849

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows...

4.7CVSS5.2AI score0.08412EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.83 views

CVE-2017-11851

The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709, allows an information disclosure vulnerability when it improperl...

4.7CVSS5.3AI score0.08412EPSS
CVE
CVE
added 2018/06/14 12:29 p.m.83 views

CVE-2018-8216

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is unique...

5.3CVSS5.2AI score0.01097EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.83 views

CVE-2019-1398

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1397.

8.4CVSS9.2AI score0.01157EPSS
Total number of security vulnerabilities2979