2508 matches found
CVE-2019-0808
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.
CVE-2020-17049
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...
CVE-2024-38063
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-21298
Windows OLE Remote Code Execution Vulnerability
CVE-2022-41128
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2019-1388
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
CVE-2011-3416
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
CVE-2024-38124
Windows Netlogon Elevation of Privilege Vulnerability
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability
CVE-2023-36563
Microsoft WordPad Information Disclosure Vulnerability
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability
CVE-2023-36805
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-38142
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38160
Windows TCP/IP Information Disclosure Vulnerability
CVE-2023-36434
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2009-3103
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Proc...
CVE-2022-26809
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2023-36584
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2023-24932
Secure Boot Security Feature Bypass Vulnerability
CVE-2022-29130
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-23415
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2023-38144
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36801
DHCP Server Service Information Disclosure Vulnerability
CVE-2024-38203
Windows Package Library Manager Information Disclosure Vulnerability
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-38161
Windows GDI Elevation of Privilege Vulnerability
CVE-2022-37967
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2023-36025
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-38149
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2024-38077
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2023-36804
Windows GDI Elevation of Privilege Vulnerability
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38141
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38152
DHCP Server Service Information Disclosure Vulnerability
CVE-2023-35349
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-38139
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability
CVE-2016-0128
The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 do not properly establish an RPC channel, which allows man-in-the-middle attackers ...