Lucene search

K
MicrosoftWindows 101909

1432 matches found

CVE
CVE
added 2020/10/16 11:15 p.m.127 views

CVE-2020-16907

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

7.8CVSS7.8AI score0.00744EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.127 views

CVE-2020-16967

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user right...

9.3CVSS8.3AI score0.10395EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.127 views

CVE-2021-1666

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.127 views

CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability

9.3CVSS8.8AI score0.02829EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.127 views

CVE-2022-21900

Windows Hyper-V Security Feature Bypass Vulnerability

4.6CVSS6.7AI score0.00274EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.126 views

CVE-2020-1474

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an aut...

7.8CVSS7.8AI score0.01199EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.126 views

CVE-2020-1477

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS8.2AI score0.04189EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.126 views

CVE-2020-1525

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

8.8CVSS8.2AI score0.08623EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.126 views

CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.126 views

CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.126 views

CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.126 views

CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.126 views

CVE-2021-34536

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00537EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.126 views

CVE-2021-34537

Windows Bluetooth Driver Elevation of Privilege Vulnerability

8CVSS8.6AI score0.00259EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.126 views

CVE-2021-38632

BitLocker Security Feature Bypass Vulnerability

5.7CVSS6.5AI score0.00475EPSS
CVE
CVE
added 2021/11/10 1:19 a.m.126 views

CVE-2021-41371

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

4.4CVSS6.3AI score0.00408EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.126 views

CVE-2022-26920

Windows Graphics Component Information Disclosure Vulnerability

5.5CVSS7AI score0.00528EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.125 views

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

8.8CVSS8.3AI score0.27581EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.125 views

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s systemTo exploit this vulnerability, an attacker would need to run a special...

5.5CVSS6.9AI score0.00958EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.125 views

CVE-2020-16939

An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have to log on to the system, and then run a speciall...

7.8CVSS8AI score0.23226EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.125 views

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.00889EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.125 views

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.125 views

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.125 views

CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.125 views

CVE-2021-31170

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS6.4AI score0.00387EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.125 views

CVE-2021-36970

Windows Print Spooler Spoofing Vulnerability

8.8CVSS7.9AI score0.07012EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.125 views

CVE-2021-38638

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00337EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.125 views

CVE-2021-41342

Windows MSHTML Platform Remote Code Execution Vulnerability

8.8CVSS7.7AI score0.01213EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.125 views

CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00581EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.125 views

CVE-2022-21905

Windows Hyper-V Security Feature Bypass Vulnerability

8CVSS6.7AI score0.00169EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.125 views

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.0061EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.125 views

CVE-2022-21914

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.0189EPSS
CVE
CVE
added 2022/03/09 5:15 p.m.125 views

CVE-2022-23299

Windows PDEV Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00549EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.124 views

CVE-2020-0634

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00513EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.124 views

CVE-2020-0687

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.6501EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.124 views

CVE-2020-1488

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.T...

7.8CVSS7.5AI score0.00289EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.124 views

CVE-2020-1558

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.1249EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.124 views

CVE-2020-1587

An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate p...

7.8CVSS8.7AI score0.00428EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.124 views

CVE-2021-28355

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.124 views

CVE-2021-33751

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.2AI score0.00794EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.124 views

CVE-2021-33755

Windows Hyper-V Denial of Service Vulnerability

8.6CVSS7AI score0.00998EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.124 views

CVE-2021-34500

Windows Kernel Memory Information Disclosure Vulnerability

7.7CVSS7AI score0.01142EPSS
CVE
CVE
added 2021/11/10 1:18 a.m.124 views

CVE-2021-38665

Remote Desktop Protocol Client Information Disclosure Vulnerability

7.4CVSS7.8AI score0.02901EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.124 views

CVE-2022-21850

Remote Desktop Client Remote Code Execution Vulnerability

9.3CVSS9.3AI score0.07726EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.124 views

CVE-2022-21912

DirectX Graphics Kernel Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.02659EPSS
CVE
CVE
added 2022/02/09 5:15 p.m.124 views

CVE-2022-21985

Windows Remote Access Connection Manager Information Disclosure Vulnerability

5.5CVSS6.2AI score0.00321EPSS
CVE
CVE
added 2022/04/15 7:15 p.m.124 views

CVE-2022-26802

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00373EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.123 views

CVE-2020-1039

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.3AI score0.10479EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.123 views

CVE-2020-1113

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.

9.3CVSS8.2AI score0.01508EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.123 views

CVE-2020-16922

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.In an attack scenario, an attacker could bypass security features intended to prevent imprope...

5.5CVSS6.6AI score0.00564EPSS
Total number of security vulnerabilities1432