Lucene search

K
MicrosoftWindows 10

3000 matches found

CVE
CVE
added 2016/09/14 10:59 a.m.73 views

CVE-2016-3369

Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors, aka "Windows Denial of Service Vulnerability."

7.8CVSS7.2AI score0.16569EPSS
Web
CVE
CVE
added 2016/11/10 6:59 a.m.73 views

CVE-2016-7221

Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via...

7.8CVSS7.6AI score0.01519EPSS
CVE
CVE
added 2016/11/10 7:0 a.m.73 views

CVE-2016-7248

Microsoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Video Control Remote Code Execution Vulnerability."

9.3CVSS8AI score0.3156EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.73 views

CVE-2017-0156

An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphics ...

7CVSS7.2AI score0.01085EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.73 views

CVE-2017-11782

The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server, aka "Windows SMB Elevation of Privilege Vulnerability".

7.8CVSS8.5AI score0.00724EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.73 views

CVE-2017-8474

The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel...

5CVSS4.8AI score0.14765EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.73 views

CVE-2017-8482

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.73 views

CVE-2017-8489

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.14765EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.73 views

CVE-2017-8544

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to obtain information to further compromise the user's system when Windows Search fails to handle...

5.5CVSS5.3AI score0.0347EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.73 views

CVE-2017-8573

Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

7CVSS6.9AI score0.00972EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.73 views

CVE-2017-8699

Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows S...

7.6CVSS7.5AI score0.30581EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.73 views

CVE-2017-8719

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects...

4.7CVSS4.9AI score0.22645EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.73 views

CVE-2017-8746

Windows Device Guard in Windows 10 1607, 1703, and Windows Server 2016 allows A security feature bypass vulnerability due to how PowerShell exposes functions and processes user supplied code, aka "Device Guard Security Feature Bypass Vulnerability".

5.3CVSS6.6AI score0.00524EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.73 views

CVE-2018-8445

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8419, CVE-2018-8442, CVE-2018-8443,...

5.5CVSS5.7AI score0.04707EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.73 views

CVE-2019-1379

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1383, CVE-2019-1417.

7.8CVSS8.5AI score0.0037EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.73 views

CVE-2020-0727

An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00502EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.73 views

CVE-2020-0732

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0709.

7.8CVSS7.8AI score0.00538EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.73 views

CVE-2020-1081

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00231EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.73 views

CVE-2020-1082

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1088.

7.8CVSS8.5AI score0.00285EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.73 views

CVE-2020-1131

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020...

7.8CVSS7.7AI score0.00278EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.73 views

CVE-2020-1139

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1149, CVE-2020-1151, CVE-2020-115...

7.8CVSS7.7AI score0.12134EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.73 views

CVE-2020-1141

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0963...

5.5CVSS6.5AI score0.2819EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.73 views

CVE-2021-26879

Windows Network Address Translation (NAT) Denial of Service Vulnerability

7.5CVSS8.2AI score0.20423EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.73 views

CVE-2021-26890

Application Virtualization Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.00729EPSS
CVE
CVE
added 2015/08/15 12:59 a.m.72 views

CVE-2015-2472

Remote Desktop Session Host (RDSH) in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

4.3CVSS6.2AI score0.03698EPSS
CVE
CVE
added 2015/12/09 11:59 a.m.72 views

CVE-2015-6171

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory El...

7.2CVSS6.2AI score0.0345EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.72 views

CVE-2016-3213

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanis...

9.3CVSS8.6AI score0.78311EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.72 views

CVE-2016-3215

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201.

5.5CVSS5.4AI score0.36951EPSS
CVE
CVE
added 2016/09/14 10:59 a.m.72 views

CVE-2016-3374

The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than...

6.5CVSS5.9AI score0.34166EPSS
CVE
CVE
added 2016/10/14 2:59 a.m.72 views

CVE-2016-3376

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privi...

9.3CVSS7AI score0.19028EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.72 views

CVE-2016-7222

Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task, aka "Task Scheduler Elevation of Privilege Vulnerability."

7.8CVSS7.5AI score0.01092EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.72 views

CVE-2016-7224

Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation o...

6.1CVSS6.2AI score0.01093EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.72 views

CVE-2017-11784

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, allows an information disclosure vulnerability when it improperly handles objects in memory, aka "Windows Kernel ...

5.5CVSS6.7AI score0.08EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.72 views

CVE-2017-11785

The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an information disclosure vulnerability when it improperly hand...

5.5CVSS6.7AI score0.08EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.72 views

CVE-2017-8580

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka ...

7CVSS6.9AI score0.12071EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.72 views

CVE-2017-8689

The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to prope...

7CVSS8AI score0.01133EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.72 views

CVE-2017-8707

The Windows Hyper-V component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated u...

5.3CVSS5.2AI score0.03199EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.72 views

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336.

7.8CVSS8.4AI score0.00397EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.72 views

CVE-2019-1418

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

3.3CVSS5.8AI score0.01042EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.72 views

CVE-2020-0699

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0962.

5.5CVSS6AI score0.00873EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.72 views

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Info...

5.5CVSS6.3AI score0.00983EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.72 views

CVE-2020-0820

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.

5.5CVSS6.6AI score0.00996EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.72 views

CVE-2020-0882

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880.

6.5CVSS6.2AI score0.27243EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.72 views

CVE-2020-1121

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111, CVE-2020-1165, CVE-2020-1166.

7.8CVSS7.6AI score0.00274EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.72 views

CVE-2020-1156

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-115...

7.8CVSS7.7AI score0.12134EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.72 views

CVE-2020-1188

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020...

7.8CVSS7.7AI score0.00278EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.72 views

CVE-2020-1386

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.0065EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.72 views

CVE-2020-1395

An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.

7.8CVSS8.1AI score0.00694EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.72 views

CVE-2021-26872

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00513EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.72 views

CVE-2021-43239

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00172EPSS
Total number of security vulnerabilities3000