Lucene search

K

1449 matches found

CVE
CVE
added 2020/02/11 10:15 p.m.100 views

CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.100 views

CVE-2020-0945

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947.

5.5CVSS5.6AI score0.24868EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.100 views

CVE-2020-1207

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247, CVE-2020-1251, CVE-2020-1253, CVE-2020-1310.

7.8CVSS7AI score0.00798EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.100 views

CVE-2020-1412

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.

9.3CVSS9.3AI score0.20706EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.100 views

CVE-2021-33773

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00355EPSS
CVE
CVE
added 2021/09/15 12:15 p.m.100 views

CVE-2021-36964

Windows Event Tracing Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00243EPSS
CVE
CVE
added 2021/10/13 1:15 a.m.100 views

CVE-2021-40476

Windows AppContainer Elevation Of Privilege Vulnerability

7.8CVSS7.9AI score0.0049EPSS
CVE
CVE
added 2022/01/11 9:15 p.m.100 views

CVE-2022-21962

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

7.2CVSS8.2AI score0.02038EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.100 views

CVE-2022-34725

Windows ALPC Elevation of Privilege Vulnerability

7CVSS8.1AI score0.01954EPSS
CVE
CVE
added 2023/05/31 7:15 p.m.100 views

CVE-2022-35745

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE
added 2022/10/11 7:15 p.m.100 views

CVE-2022-38000

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS
CVE
CVE
added 2022/09/13 7:15 p.m.100 views

CVE-2022-38004

Windows Fax Service Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.00545EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.100 views

CVE-2022-44697

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00208EPSS
CVE
CVE
added 2023/01/10 10:15 p.m.100 views

CVE-2023-21754

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00579EPSS
CVE
CVE
added 2016/10/14 2:59 a.m.99 views

CVE-2016-0070

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive ...

5.5CVSS5.3AI score0.03106EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.99 views

CVE-2017-0184

A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-20...

5.4CVSS5.7AI score0.00584EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.99 views

CVE-2017-8528

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, and Microsoft Office 2010 SP2 allows a remote code execution vulnerability due to the way it han...

9.3CVSS5.9AI score0.55105EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.99 views

CVE-2019-1166

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.

5.9CVSS7AI score0.02573EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.99 views

CVE-2019-1326

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.

7.8CVSS8.1AI score0.11204EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.99 views

CVE-2019-1397

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1389, CVE-2019-1398.

8.4CVSS9.2AI score0.01157EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.99 views

CVE-2020-0614

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

7.8CVSS7.7AI score0.00511EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.99 views

CVE-2020-0994

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992,...

9.3CVSS8AI score0.33652EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.99 views

CVE-2020-1004

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00397EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.99 views

CVE-2022-29105

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.03165EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.99 views

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.0637EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.99 views

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00255EPSS
CVE
CVE
added 2017/05/12 2:29 p.m.98 views

CVE-2017-0273

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280.

5.9CVSS6.2AI score0.09629EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.98 views

CVE-2018-0844

The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability ...

7.8CVSS6.8AI score0.00717EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.98 views

CVE-2018-0960

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

5.5CVSS5.2AI score0.02612EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.98 views

CVE-2018-0968

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Win...

5.5CVSS5AI score0.02612EPSS
CVE
CVE
added 2018/04/12 1:29 a.m.98 views

CVE-2018-0970

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5AI score0.02612EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.98 views

CVE-2019-0788

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-1290, CVE-2019-1291.

9.3CVSS8.8AI score0.32912EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.98 views

CVE-2019-1248

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-1247,...

9.3CVSS8.5AI score0.35463EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.98 views

CVE-2019-1456

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.

8.8CVSS9.3AI score0.23721EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.98 views

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00549EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.98 views

CVE-2020-0684

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.33494EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.98 views

CVE-2020-0708

A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting how the Windows Imagi...

7.8CVSS8.3AI score0.20038EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.98 views

CVE-2020-0840

An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841, CVE-2020-0849, CVE-2020-0896.

7.8CVSS7.5AI score0.00397EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.98 views

CVE-2020-0965

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.

7.8CVSS8.2AI score0.01329EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.98 views

CVE-2020-1085

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.00278EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.98 views

CVE-2020-1208

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1236.

9.3CVSS8.4AI score0.33652EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.98 views

CVE-2020-1333

An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'.

6.7CVSS7.7AI score0.0042EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.98 views

CVE-2021-43224

Windows Common Log File System Driver Information Disclosure Vulnerability

5.5CVSS7AI score0.14955EPSS
CVE
CVE
added 2022/03/09 5:15 p.m.98 views

CVE-2022-23290

Windows Inking COM Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00227EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.98 views

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00208EPSS
CVE
CVE
added 2016/05/11 1:59 a.m.97 views

CVE-2016-0169

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component Informati...

6.5CVSS5.9AI score0.68305EPSS
CVE
CVE
added 2016/05/11 1:59 a.m.97 views

CVE-2016-0170

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics Component RCE Vulnerabili...

9.3CVSS8.6AI score0.80037EPSS
CVE
CVE
added 2016/05/11 1:59 a.m.97 views

CVE-2016-0178

The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles free operations, which allows remote attackers to execute arbitrary code via malformed RPC requ...

9CVSS8.8AI score0.24402EPSS
CVE
CVE
added 2016/12/20 6:59 a.m.97 views

CVE-2016-7272

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, ...

9.3CVSS8.8AI score0.44935EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.97 views

CVE-2017-0193

Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyp...

7.8CVSS5.7AI score0.00986EPSS
Total number of security vulnerabilities1449