CVE-2019-0626

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

CVE-2021-26435

Windows Scripting Engine Memory Corruption Vulnerability

CVE-2023-28302

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-20660

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

CVE-2022-22036

Performance Counters for Windows Elevation of Privilege Vulnerability

CVE-2022-22037

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-24493

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability

CVE-2022-30163

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2023-21560

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2019-1071

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2023-23410

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2024-26200

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2010-0806

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, a...

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

CVE-2024-20661

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-20662

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVE-2024-26228

Windows Cryptographic Services Security Feature Bypass Vulnerability

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability

CVE-2011-2014

The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windo...

CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411...

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2024-26210

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

CVE-2021-34444

Windows DNS Server Denial of Service Vulnerability

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-30203

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2023-24910

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2008-4114

srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is...

CVE-2012-0004

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, ...

CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

CVE-2021-40447

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability

CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-21750

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21313

Windows TCP/IP Information Disclosure Vulnerability

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability