Lucene search

K
MicrosoftWindows 101909

1432 matches found

CVE
CVE
added 2021/02/25 11:15 p.m.105 views

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00152EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.105 views

CVE-2021-34510

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00515EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.105 views

CVE-2021-36969

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00448EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.105 views

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00193EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.105 views

CVE-2022-21876

Win32k Information Disclosure Vulnerability

5.5CVSS7AI score0.00745EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.105 views

CVE-2022-22712

Windows Hyper-V Denial of Service Vulnerability

5.6CVSS6.7AI score0.002EPSS
CVE
CVE
added 2019/12/10 10:15 p.m.104 views

CVE-2019-1466

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.

6.5CVSS6.7AI score0.26055EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.104 views

CVE-2020-0791

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.

7.8CVSS8.1AI score0.00526EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.104 views

CVE-2020-0916

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915.

7.8CVSS8.1AI score0.00428EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.104 views

CVE-2020-1211

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.13831EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.104 views

CVE-2020-1234

An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.17656EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-1542

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-1545

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00514EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-1546

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00514EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-1548

An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to improperly disclose memory.Th...

7.8CVSS7.4AI score0.00617EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-1556

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specia...

7.8CVSS8.1AI score0.00378EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.104 views

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then insta...

7.8CVSS8.2AI score0.0066EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.104 views

CVE-2020-16998

DirectX Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.00412EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.104 views

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0452EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.104 views

CVE-2020-17057

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS7.2AI score0.10824EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.104 views

CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00437EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.104 views

CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

9.3CVSS8.2AI score0.03305EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.104 views

CVE-2021-1673

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.104 views

CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.00448EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.104 views

CVE-2021-38624

Windows Key Storage Provider Security Feature Bypass Vulnerability

6.5CVSS7.3AI score0.00473EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.104 views

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00372EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.104 views

CVE-2022-21904

Windows GDI Information Disclosure Vulnerability

7.5CVSS7.8AI score0.15777EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.104 views

CVE-2022-29125

Windows Push Notifications Apps Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00332EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.103 views

CVE-2020-1175

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1176.

9.3CVSS8AI score0.35463EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.103 views

CVE-2020-1306

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1304, CVE-2020-133...

7.8CVSS7.7AI score0.12134EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.103 views

CVE-2020-1521

An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security ...

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.103 views

CVE-2020-1522

An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security ...

7.8CVSS8.1AI score0.00502EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.103 views

CVE-2020-1551

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00681EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.103 views

CVE-2020-17090

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

9.8CVSS6.6AI score0.02418EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.103 views

CVE-2021-1680

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00347EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.103 views

CVE-2021-28313

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00674EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.103 views

CVE-2021-36967

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

8.8CVSS8AI score0.01505EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.103 views

CVE-2021-38635

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00456EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.103 views

CVE-2021-40470

DirectX Graphics Kernel Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00465EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.103 views

CVE-2021-42288

Windows Hello Security Feature Bypass Vulnerability

6.1CVSS6.2AI score0.0046EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.103 views

CVE-2022-21961

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

7.2CVSS8.2AI score0.02021EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.102 views

CVE-2020-1008

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.102 views

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015.

7.8CVSS7.7AI score0.08877EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.102 views

CVE-2020-1436

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerabilit...

8.8CVSS9.3AI score0.10033EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.102 views

CVE-2020-1560

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or cre...

7.8CVSS7.9AI score0.01465EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.102 views

CVE-2020-16890

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

7.8CVSS8.1AI score0.00744EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.102 views

CVE-2020-16901

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...

5.5CVSS4.9AI score0.01398EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.102 views

CVE-2020-16921

An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow an ...

5.5CVSS6.6AI score0.00569EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.102 views

CVE-2021-1653

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.102 views

CVE-2021-1660

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
Total number of security vulnerabilities1432