3407 matches found
CVE-2020-0642
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.
CVE-2021-31962
Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2022-21836
Windows Certificate Spoofing Vulnerability
CVE-2022-29139
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30135
Windows Media Center Elevation of Privilege Vulnerability
CVE-2023-21552
Windows GDI Elevation of Privilege Vulnerability
CVE-2019-1094
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
CVE-2020-1530
An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security updat...
CVE-2021-38666
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-21983
Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2022-22042
Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-21535
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2015-2518
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption E...
CVE-2019-0538
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...
CVE-2021-26899
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVE-2022-26801
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41081
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-21726
Windows Credential Manager User Interface Elevation of Privilege Vulnerability
CVE-2024-20691
Windows Themes Information Disclosure Vulnerability
CVE-2022-21920
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-26815
Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-36423
Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2010-0270
The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SM...
CVE-2015-2511
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption E...
CVE-2016-3310
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privi...
CVE-2019-1096
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
CVE-2022-24530
Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21727
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-23405
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-28218
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-36903
Windows System Assessment Tool Elevation of Privilege Vulnerability
CVE-2024-30063
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2020-16933
A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file co...
CVE-2022-22025
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
CVE-2024-20657
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2010-0480
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stac...
CVE-2018-8256
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, ...
CVE-2022-37986
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-38044
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
CVE-2023-36395
Windows Deployment Services Denial of Service Vulnerability
CVE-2025-21302
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2009-2493
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly r...
CVE-2022-41039
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-21690
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-28283
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-32015
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2025-21263
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2022-23270
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-34729
Windows GDI Elevation of Privilege Vulnerability
CVE-2022-38043
Windows Security Support Provider Interface Information Disclosure Vulnerability