CVE-2021-36927

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability

CVE-2022-30155

Windows Kernel Denial of Service Vulnerability

CVE-2022-41053

Windows Kerberos Denial of Service Vulnerability

CVE-2022-41057

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2022-41109

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-21760

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21774

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-29364

Windows Authentication Elevation of Privilege Vulnerability

CVE-2023-36909

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-30020

Windows Cryptographic Services Remote Code Execution Vulnerability

CVE-2015-2370

The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not prevent DCE/RPC connection refl...

CVE-2016-3304

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrar...

CVE-2018-0959

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serv...

CVE-2018-8304

A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

CVE-2019-0600

An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.

CVE-2020-1377

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.A locally authenticated attacker could exploit this vulnerability by...

CVE-2020-1531

An elevation of privilege vulnerability exists when the Windows Accounts Control improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The securit...

CVE-2020-1562

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

CVE-2021-1657

Windows Fax Compose Form Remote Code Execution Vulnerability

CVE-2021-28346

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-34499

Windows DNS Server Denial of Service Vulnerability

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

CVE-2021-41332

Windows Print Spooler Information Disclosure Vulnerability

CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

CVE-2022-21899

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2023-23402

Windows Media Remote Code Execution Vulnerability

CVE-2023-35630

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2024-30031

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2024-43592

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2009-2500

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

CVE-2009-3126

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

CVE-2017-0269

The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280.

CVE-2018-8167

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server...

CVE-2019-0774

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0614.

CVE-2019-1095

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.

CVE-2019-1333

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

CVE-2020-1339

A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system.There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user...

CVE-2020-16920

An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code e...

CVE-2021-28330

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-31184

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

CVE-2021-33745

Windows DNS Server Denial of Service Vulnerability

CVE-2021-36960

Windows SMB Information Disclosure Vulnerability

CVE-2021-38639

Win32k Elevation of Privilege Vulnerability

CVE-2021-40455

Windows Installer Spoofing Vulnerability

CVE-2022-35756

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2022-38033

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

CVE-2022-44668

Windows Media Remote Code Execution Vulnerability

CVE-2023-21772

Windows Kernel Elevation of Privilege Vulnerability