Lucene search

K

2201 matches found

CVE
CVE
added 2022/05/10 9:15 p.m.141 views

CVE-2022-29115

Windows Fax Service Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.03165EPSS
CVE
CVE
added 2016/02/10 11:59 a.m.140 views

CVE-2016-0051

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnera...

7.8CVSS7.5AI score0.7854EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.140 views

CVE-2018-8206

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

7.8CVSS6.4AI score0.12158EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.140 views

CVE-2019-0569

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.140 views

CVE-2019-0727

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, ...

7.8CVSS7.3AI score0.00327EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.140 views

CVE-2019-1256

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1285.

7.8CVSS8AI score0.01395EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.140 views

CVE-2020-1470

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The sec...

7.8CVSS8.1AI score0.00936EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.140 views

CVE-2020-1561

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

9.3CVSS8.2AI score0.15375EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.140 views

CVE-2022-21851

Remote Desktop Client Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.07726EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.140 views

CVE-2022-21997

Windows Print Spooler Elevation of Privilege Vulnerability

7.1CVSS7.2AI score0.00305EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.140 views

CVE-2022-38026

Windows DHCP Client Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00189EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.139 views

CVE-2017-0277

The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it ...

7CVSS7.7AI score0.05522EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.139 views

CVE-2017-8527

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics Rem...

9.3CVSS6AI score0.28831EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.139 views

CVE-2017-8695

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; L...

5.3CVSS6AI score0.25671EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.139 views

CVE-2018-8344

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.2AI score0.16701EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.139 views

CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server ...

8.8CVSS8.3AI score0.16322EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.139 views

CVE-2019-0552

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

8.8CVSS7.6AI score0.00868EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.139 views

CVE-2019-0736

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.To exploit the vulnerability, an attacker could send speci...

9.8CVSS9.2AI score0.1289EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.139 views

CVE-2019-0844

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0840.

5.5CVSS6.1AI score0.00978EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.139 views

CVE-2019-1271

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.00254EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.139 views

CVE-2021-34455

Windows File History Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00164EPSS
CVE
CVE
added 2021/07/16 9:15 p.m.139 views

CVE-2021-34462

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00301EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.139 views

CVE-2021-34492

Windows Certificate Spoofing Vulnerability

8.1CVSS8.3AI score0.01074EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.139 views

CVE-2021-34497

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.01697EPSS
CVE
CVE
added 2022/03/09 5:15 p.m.139 views

CVE-2022-23298

Windows NT OS Kernel Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00356EPSS
CVE
CVE
added 2018/01/04 2:29 p.m.138 views

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory addresse...

7.8CVSS5.5AI score0.04004EPSS
CVE
CVE
added 2018/12/12 12:29 a.m.138 views

CVE-2018-8634

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

9.3CVSS9.3AI score0.32912EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.138 views

CVE-2019-0577

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/04/09 12:29 a.m.138 views

CVE-2019-0755

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.

5.5CVSS5.6AI score0.00908EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.138 views

CVE-2019-0846

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0847, CVE-2019-0851, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.138 views

CVE-2020-0625

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.138 views

CVE-2020-0738

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.

9.3CVSS8.6AI score0.21773EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.138 views

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.

7.8CVSS7.8AI score0.08877EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.138 views

CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

7.5CVSS8.3AI score0.10619EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.138 views

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00389EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.138 views

CVE-2022-29137

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.0999EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.137 views

CVE-2017-0016

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server servi...

7.1CVSS6.3AI score0.49202EPSS
CVE
CVE
added 2018/06/14 12:29 p.m.137 views

CVE-2018-8210

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID ...

7.8CVSS8.2AI score0.14292EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.137 views

CVE-2019-0579

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.137 views

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.

9.3CVSS8.8AI score0.28171EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.137 views

CVE-2019-0879

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.

7.8CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.137 views

CVE-2019-1149

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.3AI score0.37629EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.137 views

CVE-2019-1282

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00573EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.137 views

CVE-2021-36965

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

9.8CVSS6.7AI score0.01104EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.137 views

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS7.9AI score0.08945EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.137 views

CVE-2022-21889

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

7.5CVSS8.2AI score0.10382EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.137 views

CVE-2022-41118

Windows Scripting Languages Remote Code Execution Vulnerability

7.5CVSS8.1AI score0.00088EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.136 views

CVE-2018-0967

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

6.3CVSS6.3AI score0.22945EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.136 views

CVE-2018-1012

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

9.3CVSS7.3AI score0.57782EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.136 views

CVE-2019-0578

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
Total number of security vulnerabilities2201