847 matches found
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-40449
Win32k Elevation of Privilege Vulnerability
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-21882
Win32k Elevation of Privilege Vulnerability
CVE-2023-36884
Windows Search Remote Code Execution Vulnerability
CVE-2022-22718
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-41379
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-21999
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-22047
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2021-40450
Win32k Elevation of Privilege Vulnerability
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-41357
Win32k Elevation of Privilege Vulnerability
CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2023-36802
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41125
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-35355
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36805
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-38142
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38144
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-38161
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-38149
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36804
Windows GDI Elevation of Privilege Vulnerability
CVE-2024-38202
SummaryMicrosoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attack...
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38141
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38039
When curl retrieves an HTTP response, it stores the incoming headers so thatthey can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it wouldaccept in a response, allowing a malicious server to stream an endless seriesof headers and...
CVE-2023-38139
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability
CVE-2023-38150
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-38171
Microsoft QUIC Denial of Service Vulnerability
CVE-2023-38159
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-36702
Microsoft DirectMusic Remote Code Execution Vulnerability