Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftWindows 101607

2267 matches found

CVE
CVE•added 2022/10/11 7:15 p.m.•106 views

CVE-2022-38016

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.00188EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•106 views

CVE-2022-41054

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00189EPSS
CVE
CVE•added 2022/11/09 10:15 p.m.•106 views

CVE-2022-41097

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

6.5CVSS7.1AI score0.02618EPSS
CVE
CVE•added 2017/05/12 2:29 p.m.•105 views

CVE-2017-0275

Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...

5.9CVSS6.1AI score0.27804EPSS
CVE
CVE•added 2017/12/12 9:29 p.m.•105 views

CVE-2017-11927

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines th...

6.5CVSS6.9AI score0.20851EPSS
CVE
CVE•added 2018/03/14 5:29 p.m.•105 views

CVE-2018-0813

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way obje...

5.5CVSS4.8AI score0.06807EPSS
CVE
CVE•added 2018/06/14 12:29 p.m.•105 views

CVE-2018-8207

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

4.7CVSS5.3AI score0.01934EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8320

A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windo...

4.3CVSS5.6AI score0.01939EPSS
CVE
CVE•added 2018/09/13 12:29 a.m.•105 views

CVE-2018-8419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Win...

5.5CVSS5.5AI score0.04881EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8486

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows S...

5.5CVSS5.8AI score0.01054EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8489

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Wind...

8.4CVSS7.8AI score0.00751EPSS
CVE
CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8490

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, W...

8.4CVSS7.8AI score0.00751EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0894

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0895, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0895

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•105 views

CVE-2019-1344

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.08119EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•105 views

CVE-2019-1345

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.

5.5CVSS6.5AI score0.07944EPSS
CVE
CVE•added 2020/01/14 11:15 p.m.•105 views

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.

5.5CVSS6.6AI score0.00681EPSS
CVE
CVE•added 2020/04/15 3:15 p.m.•105 views

CVE-2020-1011

An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015.

7.8CVSS7.8AI score0.08877EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1251

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1253, CVE-2020-1310.

7.2CVSS7AI score0.00798EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1270

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00681EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•105 views

CVE-2020-1534

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.13239EPSS
CVE
CVE•added 2020/10/16 11:15 p.m.•105 views

CVE-2020-16889

An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log ...

5.5CVSS6.6AI score0.01039EPSS
CVE
CVE•added 2020/12/10 12:15 a.m.•105 views

CVE-2020-16960

Windows Backup Engine Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.01021EPSS
CVE
CVE•added 2021/01/12 8:15 p.m.•105 views

CVE-2021-1671

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE•added 2021/02/25 11:15 p.m.•105 views

CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability

6.5CVSS7.8AI score0.20715EPSS
CVE
CVE•added 2021/02/25 11:15 p.m.•105 views

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00152EPSS
CVE
CVE•added 2021/09/15 12:15 p.m.•105 views

CVE-2021-36969

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00448EPSS
CVE
CVE•added 2021/11/10 1:19 a.m.•105 views

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00193EPSS
CVE
CVE•added 2022/01/11 9:15 p.m.•105 views

CVE-2022-21876

Win32k Information Disclosure Vulnerability

5.5CVSS7AI score0.00745EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•105 views

CVE-2022-30198

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35834

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.03169EPSS
CVE
CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.04156EPSS
CVE
CVE•added 2022/10/11 7:15 p.m.•105 views

CVE-2022-37995

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00312EPSS
CVE
CVE•added 2022/12/13 7:15 p.m.•105 views

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00288EPSS
CVE
CVE•added 2023/01/10 10:15 p.m.•105 views

CVE-2023-21766

Windows Overlay Filter Information Disclosure Vulnerability

4.7CVSS4.8AI score0.03918EPSS
CVE
CVE•added 2017/04/12 2:59 p.m.•104 views

CVE-2017-0162

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Executi...

7.6CVSS8AI score0.00421EPSS
CVE
CVE•added 2018/03/14 5:29 p.m.•104 views

CVE-2018-0896

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

4.7CVSS4.7AI score0.06807EPSS
CVE
CVE•added 2018/04/12 1:29 a.m.•104 views

CVE-2018-0966

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

3.3CVSS5.8AI score0.00296EPSS
CVE
CVE•added 2018/05/09 7:29 p.m.•104 views

CVE-2018-8134

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

7CVSS7.5AI score0.07473EPSS
CVE
CVE•added 2018/06/14 12:29 p.m.•104 views

CVE-2018-8169

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server ...

7CVSS7.6AI score0.01451EPSS
CVE
CVE•added 2018/07/11 12:29 a.m.•104 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

6.8CVSS6.5AI score0.01151EPSS
CVE
CVE•added 2018/09/13 12:29 a.m.•104 views

CVE-2018-8449

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

3.3CVSS5.3AI score0.01112EPSS
CVE
CVE•added 2019/05/16 7:29 p.m.•104 views

CVE-2019-0961

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882.

6.5CVSS6.2AI score0.25343EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1018

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with ful...

7.8CVSS7.7AI score0.00167EPSS
CVE
CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1028

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS8.2AI score0.00299EPSS
CVE
CVE•added 2019/09/11 10:15 p.m.•104 views

CVE-2019-1252

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.

6.5CVSS6.7AI score0.3045EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•104 views

CVE-2019-1359

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1358.

9.3CVSS8.8AI score0.58897EPSS
CVE
CVE•added 2019/12/10 10:15 p.m.•104 views

CVE-2019-1466

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.

6.5CVSS6.7AI score0.26055EPSS
CVE
CVE•added 2020/03/12 4:15 p.m.•104 views

CVE-2020-0791

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.

7.8CVSS8.1AI score0.00526EPSS
CVE
CVE•added 2020/06/09 8:15 p.m.•104 views

CVE-2020-0916

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915.

7.8CVSS8.1AI score0.00428EPSS
Total number of security vulnerabilities2267