Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2017/10/13 1:29 p.m.82 views

CVE-2017-11815

The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability in the way that it ha...

5.3CVSS6.4AI score0.22607EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.82 views

CVE-2017-11829

Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.

5.5CVSS7.1AI score0.02283EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.82 views

CVE-2017-11853

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows...

5.5CVSS5.2AI score0.08412EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.82 views

CVE-2017-8564

Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly initialize a memory ad...

5.5CVSS5.3AI score0.22928EPSS
Web
CVE
CVE
added 2017/07/11 9:29 p.m.82 views

CVE-2017-8590

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver han...

8.8CVSS6.9AI score0.00997EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.82 views

CVE-2019-1216

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.01464EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.82 views

CVE-2019-1293

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windows SMB Client Driver Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.00955EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.82 views

CVE-2019-1417

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379, CVE-2019-1383.

7.8CVSS8.5AI score0.0037EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.82 views

CVE-2020-0661

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0751.

6.8CVSS6.5AI score0.00601EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.82 views

CVE-2020-0770

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This ...

7.8CVSS8.2AI score0.00656EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.82 views

CVE-2020-0798

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer Eleva...

7.8CVSS6.7AI score0.00646EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.82 views

CVE-2020-0998

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.In a local attack scenario, an attacker could exploit this vulnerability by r...

7.8CVSS7.9AI score0.00726EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.82 views

CVE-2020-1061

A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.1868EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.82 views

CVE-2020-1126

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1136, CVE-2020-1150.

9.3CVSS8.1AI score0.23624EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.82 views

CVE-2020-1169

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.An attacker could exploit this vulnerability by running a specially crafted applica...

7.8CVSS8.1AI score0.10594EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.82 views

CVE-2020-1191

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020...

7.8CVSS7.7AI score0.00278EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.82 views

CVE-2020-1277

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS8.1AI score0.00656EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.82 views

CVE-2020-1284

A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Denial of Service Vulnerability'.

6.5CVSS6.7AI score0.14604EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.0095EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1372

An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405.

7.8CVSS7.9AI score0.0049EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1406

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00505EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1389, CVE-2020-1426.

5.5CVSS5.9AI score0.00978EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1420

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.00641EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1427

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1428, CVE-2020-1438.

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.82 views

CVE-2020-1429

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

7.8CVSS8.4AI score0.00505EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.82 views

CVE-2020-16999

Windows WalletService Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00446EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.82 views

CVE-2020-17022

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.Exploitation of the vulnerability requires that a program process a specially crafted image ...

7.8CVSS7.7AI score0.08335EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.82 views

CVE-2020-17031

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00681EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.82 views

CVE-2020-17074

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00505EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.82 views

CVE-2020-17075

Windows USO Core Worker Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.003EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.82 views

CVE-2021-1690

Windows WalletService Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00256EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.82 views

CVE-2021-1729

Windows Update Stack Setup Elevation of Privilege Vulnerability

7.8CVSS7.2AI score0.00184EPSS
CVE
CVE
added 2015/11/11 11:59 a.m.81 views

CVE-2015-2478

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an i...

7.2CVSS6.5AI score0.02965EPSS
CVE
CVE
added 2016/10/14 2:59 a.m.81 views

CVE-2016-0073

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Pr...

5CVSS5.1AI score0.05869EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.81 views

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

7.8CVSS6.1AI score0.11081EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.81 views

CVE-2016-3238

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver du...

9.3CVSS8.1AI score0.15154EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.81 views

CVE-2016-7210

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a craft...

6.5CVSS6.5AI score0.35475EPSS
CVE
CVE
added 2016/12/20 6:59 a.m.81 views

CVE-2016-7292

The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a craft...

7.8CVSS7.5AI score0.00849EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.81 views

CVE-2017-0287

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This ...

5CVSS5.1AI score0.24455EPSS
Web
CVE
CVE
added 2017/10/13 1:29 p.m.81 views

CVE-2017-11816

The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the wa...

5.5CVSS6.6AI score0.00619EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.81 views

CVE-2017-11831

Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log on to an affected system, and run a specially crafted app...

4.7CVSS5.2AI score0.0122EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.81 views

CVE-2017-8479

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.81 views

CVE-2017-8481

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
Web
CVE
CVE
added 2017/06/15 1:29 a.m.81 views

CVE-2017-8490

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
Web
CVE
CVE
added 2018/02/15 2:29 a.m.81 views

CVE-2018-0828

Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".

7.8CVSS7AI score0.00997EPSS
CVE
CVE
added 2018/06/14 12:29 p.m.81 views

CVE-2018-8217

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is unique...

5.3CVSS5.2AI score0.01097EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.81 views

CVE-2019-1336

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323.

7.8CVSS8.4AI score0.00397EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.81 views

CVE-2020-0616

A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.

5.5CVSS6.1AI score0.00709EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.81 views

CVE-2020-0659

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0747.

7.8CVSS8.1AI score0.00502EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.81 views

CVE-2020-0742

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0743, CVE-2020-0749, CVE-...

7.8CVSS7.7AI score0.00502EPSS
Total number of security vulnerabilities3000