CVE-2022-34729

Windows GDI Elevation of Privilege Vulnerability

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability

CVE-2023-28220

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability

CVE-2022-37958

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

CVE-2022-38029

Windows ALPC Elevation of Privilege Vulnerability

CVE-2023-23414

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2024-20680

Windows Message Queuing Client (MSMQC) Information Disclosure

CVE-2024-29066

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2017-0174

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS De...

CVE-2022-24499

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-24869

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2024-26179

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-32706

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2019-1155

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

CVE-2020-16923

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

CVE-2022-22027

Windows Fax Service Remote Code Execution Vulnerability

CVE-2022-26803

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVE-2023-21776

Windows Kernel Information Disclosure Vulnerability

CVE-2024-20664

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-26158

Microsoft Install Service Elevation of Privilege Vulnerability

CVE-2017-0272

The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it ...

CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

CVE-2022-29141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2024-26195

DHCP Server Service Remote Code Execution Vulnerability

CVE-2018-8413

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Serve...

CVE-2020-1421

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

CVE-2022-30146

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2023-21561

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2023-21732

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2015-1637

Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for ...

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wi...

CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-29112

Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-30161

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-30202

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2023-36403

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-20655

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

CVE-2024-29995

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2025-32701

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2012-0165

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."