CVE-2021-28346

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

CVE-2021-41332

Windows Print Spooler Information Disclosure Vulnerability

CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

CVE-2022-21899

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2022-21960

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVE-2019-0774

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0614.

CVE-2019-1095

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.

CVE-2019-1333

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

CVE-2020-1339

A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user...

CVE-2020-16920

An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code e...

CVE-2021-28330

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-31184

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

CVE-2021-36960

Windows SMB Information Disclosure Vulnerability

CVE-2021-38639

Win32k Elevation of Privilege Vulnerability

CVE-2021-40455

Windows Installer Spoofing Vulnerability

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

CVE-2022-44668

Windows Media Remote Code Execution Vulnerability

CVE-2023-21772

Windows Kernel Elevation of Privilege Vulnerability

CVE-2019-1087

An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1088.

CVE-2020-1529

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete d...

CVE-2020-1596

A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.To exploit the vulnerability, an attacker would have to condu...

CVE-2020-17092

Windows Network Connections Service Elevation of Privilege Vulnerability

CVE-2021-1722

Windows Fax Service Remote Code Execution Vulnerability

CVE-2021-41331

Windows Media Audio Decoder Remote Code Execution Vulnerability

CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVE-2022-24550

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2022-34689

Windows CryptoAPI Spoofing Vulnerability

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

CVE-2018-8341

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serv...

CVE-2019-0907

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE-2019-1148

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker wou...

CVE-2020-0623

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628...

CVE-2020-1379

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

CVE-2020-1554

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

CVE-2020-1584

An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially craft...

CVE-2021-28357

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-34498

Windows GDI Elevation of Privilege Vulnerability

CVE-2021-40467

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-40489

Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2021-41340

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2021-41377

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVE-2022-26790

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-34690

Windows Fax Service Elevation of Privilege Vulnerability

CVE-2022-41045

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows S...

CVE-2018-8394

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

CVE-2019-0899

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

CVE-2019-0974

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...