Lucene search

K
MicrosoftWindows 101607

2267 matches found

CVE
CVE
added 2020/01/14 11:15 p.m.131 views

CVE-2020-0630

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627...

7.8CVSS7.7AI score0.00511EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.131 views

CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.131 views

CVE-2021-31968

Windows Remote Desktop Services Denial of Service Vulnerability

7.5CVSS8.4AI score0.17798EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.131 views

CVE-2022-35803

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.01574EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.131 views

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00125EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.130 views

CVE-2017-11780

The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows a remote code execution vulnerability when it fails to properly h...

7CVSS8.4AI score0.09106EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.130 views

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

5.5CVSS6.4AI score0.0263EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.130 views

CVE-2019-0576

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.130 views

CVE-2019-0597

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.130 views

CVE-2019-0851

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0877, CVE-2019-0879.

9.3CVSS8.4AI score0.2548EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.130 views

CVE-2019-1144

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.1AI score0.41601EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.130 views

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.

5.5CVSS6.6AI score0.00681EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.130 views

CVE-2020-0729

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.30068EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.130 views

CVE-2020-17001

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00619EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.130 views

CVE-2021-27072

Win32k Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0054EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.130 views

CVE-2021-36974

Windows SMB Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00243EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.129 views

CVE-2018-0868

Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how input is ...

7CVSS6.1AI score0.00381EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.129 views

CVE-2018-8442

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS5.7AI score0.04881EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.129 views

CVE-2019-0660

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.129 views

CVE-2019-0722

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

9CVSS8.1AI score0.12753EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.129 views

CVE-2019-0882

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0961.

6.5CVSS6.2AI score0.25343EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.129 views

CVE-2019-1145

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.1AI score0.3187EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.129 views

CVE-2020-0915

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0916.

7.8CVSS8.1AI score0.00428EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.129 views

CVE-2020-1516

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The sec...

7.8CVSS8.1AI score0.00387EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.129 views

CVE-2021-1669

Windows Remote Desktop Security Feature Bypass Vulnerability

8.8CVSS8.6AI score0.0264EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.129 views

CVE-2021-36953

Windows TCP/IP Denial of Service Vulnerability

7.5CVSS7.9AI score0.0635EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.129 views

CVE-2021-41345

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00631EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.129 views

CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00253EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.129 views

CVE-2022-41047

Microsoft ODBC Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.02096EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.129 views

CVE-2022-41076

PowerShell Remote Code Execution Vulnerability

8.5CVSS8.6AI score0.37991EPSS
CVE
CVE
added 2022/11/09 10:15 p.m.129 views

CVE-2022-41086

Windows Group Policy Elevation of Privilege Vulnerability

6.4CVSS7.3AI score0.00043EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.128 views

CVE-2017-0161

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain ce...

8.1CVSS7.7AI score0.14352EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.128 views

CVE-2018-0842

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled, aka "Window...

7CVSS6.8AI score0.00825EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.128 views

CVE-2018-8468

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008...

4.7CVSS5.8AI score0.05739EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.128 views

CVE-2018-8584

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

7.8CVSS6.3AI score0.04355EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.128 views

CVE-2019-0536

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.128 views

CVE-2019-0581

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.128 views

CVE-2019-0602

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.128 views

CVE-2019-0616

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS
CVE
CVE
added 2019/04/09 2:29 a.m.128 views

CVE-2019-0756

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.16363EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.128 views

CVE-2019-0802

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849.

6.5CVSS6.7AI score0.22134EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.128 views

CVE-2019-0814

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0848.

5.5CVSS6AI score0.00996EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.128 views

CVE-2019-0839

An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0838.

4.4CVSS5.7AI score0.00695EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.128 views

CVE-2019-0941

A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering.To exploit this vulnera...

7.5CVSS6.1AI score0.02839EPSS
CVE
CVE
added 2019/07/15 7:15 p.m.128 views

CVE-2019-1082

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this vu...

7.8CVSS6.2AI score0.00372EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.128 views

CVE-2020-1564

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS
CVE
CVE
added 2021/06/08 11:15 p.m.128 views

CVE-2021-31973

Windows GPSVC Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.00665EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.128 views

CVE-2021-34504

Windows Address Book Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.01165EPSS
CVE
CVE
added 2022/08/09 8:15 p.m.128 views

CVE-2022-30144

Windows Bluetooth Service Remote Code Execution Vulnerability

7.5CVSS8.7AI score0.00241EPSS
CVE
CVE
added 2022/06/15 10:15 p.m.128 views

CVE-2022-30164

Kerberos AppContainer Security Feature Bypass Vulnerability

7.8CVSS8AI score0.01073EPSS
Total number of security vulnerabilities2267