CVE-2018-0749

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

CVE-2018-1010

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

CVE-2020-1167

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

CVE-2022-21878

Windows Geolocation Service Remote Code Execution Vulnerability

CVE-2022-24493

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability

CVE-2022-30163

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2016-0051

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnera...

CVE-2020-1248

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2022-24496

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2022-26808

Windows File Explorer Elevation of Privilege Vulnerability

CVE-2022-41113

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server ...

CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serve...

CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 201...

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-40461

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-24537

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

CVE-2019-1065

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

CVE-2022-24549

Windows AppX Package Manager Elevation of Privilege Vulnerability

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

CVE-2018-8626

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

CVE-2020-16913

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

CVE-2022-23279

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-30203

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2022-30222

Windows Shell Remote Code Execution Vulnerability

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21767

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2018-1016

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability

CVE-2021-34445

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-22009

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-24479

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVE-2022-26791

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26927

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2022-30189

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability