Lucene search

K

702 matches found

CVE
CVE
added 2019/05/16 7:29 p.m.140 views

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

7.8CVSS7.3AI score0.00327EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.140 views

CVE-2019-1256

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1285.

7.8CVSS8AI score0.01395EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.139 views

CVE-2019-0844

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0840.

5.5CVSS6.1AI score0.00978EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.139 views

CVE-2019-1271

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.00254EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.139 views

CVE-2023-23420

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00279EPSS
CVE
CVE
added 2019/04/09 12:29 a.m.138 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.

5.5CVSS5.6AI score0.00908EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.138 views

CVE-2019-0846

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0847, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.138 views

CVE-2020-0625

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.138 views

CVE-2020-0738

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.

9.3CVSS8.6AI score0.21773EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.138 views

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.

7.8CVSS7.8AI score0.08877EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.137 views

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.137 views

CVE-2019-0879

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.

7.8CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.137 views

CVE-2019-1282

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00573EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.136 views

CVE-2019-0792

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.136 views

CVE-2019-0848

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.

5.5CVSS6AI score0.00996EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.135 views

CVE-2019-0688

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.

7.5CVSS7.3AI score0.10301EPSS
CVE
CVE
added 2019/04/09 12:29 a.m.135 views

CVE-2019-0690

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.

6.8CVSS6.9AI score0.00375EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.135 views

CVE-2019-0732

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.

7.8CVSS7.9AI score0.01235EPSS
CVE
CVE
added 2019/04/09 2:29 a.m.135 views

CVE-2019-0765

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.19221EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.135 views

CVE-2023-23423

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00336EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.134 views

CVE-2017-0283

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Busi...

9.3CVSS6.4AI score0.55105EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.134 views

CVE-2019-0885

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

9.3CVSS7.7AI score0.19496EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.134 views

CVE-2023-21822

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00711EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.134 views

CVE-2023-24858

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

7.5CVSS7.2AI score0.03958EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.133 views

CVE-2019-0618

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.

9.3CVSS9.4AI score0.58174EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.133 views

CVE-2019-0623

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

7.8CVSS8.4AI score0.31087EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.133 views

CVE-2019-0794

A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.27063EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.133 views

CVE-2019-0853

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.09874EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.133 views

CVE-2019-0900

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.133 views

CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.0037EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.133 views

CVE-2019-1235

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.00128EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.133 views

CVE-2023-36911

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.03462EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.132 views

CVE-2019-0628

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00549EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.132 views

CVE-2019-0662

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618.

9.3CVSS9.4AI score0.58174EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.132 views

CVE-2019-1274

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.

5.5CVSS5.9AI score0.0059EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.132 views

CVE-2020-0607

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.

5.5CVSS6.5AI score0.175EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.132 views

CVE-2020-0608

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00978EPSS
CVE
CVE
added 2023/02/14 8:15 p.m.132 views

CVE-2023-21805

Windows MSHTML Platform Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00279EPSS
CVE
CVE
added 2023/08/08 6:15 p.m.132 views

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability

7.5CVSS7AI score0.02658EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.131 views

CVE-2019-0596

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.131 views

CVE-2019-0599

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.131 views

CVE-2019-0636

An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.

5.5CVSS6.8AI score0.00549EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.131 views

CVE-2019-0845

A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability'.

9.3CVSS8.9AI score0.22095EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.131 views

CVE-2020-0630

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627...

7.8CVSS7.7AI score0.00511EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.131 views

CVE-2023-23422

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00336EPSS
CVE
CVE
added 2023/03/14 5:15 p.m.131 views

CVE-2023-24856

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

7.5CVSS7.2AI score0.05844EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.130 views

CVE-2019-0597

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.130 views

CVE-2019-0851

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.130 views

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.

5.5CVSS6.6AI score0.00681EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.130 views

CVE-2020-0729

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.30068EPSS
Total number of security vulnerabilities702