CVE-2019-0720

A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system ...

CVE-2019-0754

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

CVE-2019-1147

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE-2020-0655

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

CVE-2020-0887

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.

CVE-2021-28333

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-33765

Windows Installer Spoofing Vulnerability

CVE-2021-33783

Windows SMB Information Disclosure Vulnerability

CVE-2021-38629

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

CVE-2021-41343

Windows Fast FAT File System Driver Information Disclosure Vulnerability

CVE-2022-21884

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

CVE-2022-30166

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2022-38037

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-41098

Windows GDI+ Information Disclosure Vulnerability

CVE-2023-21526

Windows Netlogon Information Disclosure Vulnerability

CVE-2023-21694

Windows Fax Service Remote Code Execution Vulnerability

CVE-2023-21801

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-28306

Windows DNS Server Remote Code Execution Vulnerability

CVE-2023-29373

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-30016

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2024-30024

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21286

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21303

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2010-5082

Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a ....

CVE-2018-0830

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory a...

CVE-2018-0974

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

CVE-2018-8309

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 ...

CVE-2019-0603

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attack...

CVE-2019-0716

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.To exploit this vulnerability, an attacker would have to log on to an affected system and run a special...

CVE-2019-0890

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896,...

CVE-2020-1579

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privil...

CVE-2020-16914

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it...

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2020-17098

Windows GDI+ Information Disclosure Vulnerability

CVE-2021-28339

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-34476

Bowser.sys Denial of Service Vulnerability

CVE-2021-38636

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability

CVE-2022-30200

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-37992

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21749

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21755

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2023-28217

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-30023

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-49019

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVE-2018-0757

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are han...