CVE-2020-16972

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2020-17098

Windows GDI+ Information Disclosure Vulnerability

CVE-2021-28339

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-34476

Bowser.sys Denial of Service Vulnerability

CVE-2021-38636

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

CVE-2022-21862

Windows Application Model Core API Elevation of Privilege Vulnerability

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability

CVE-2022-30200

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-37992

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-21749

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21755

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21816

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2023-28217

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-30023

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-38127

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2024-49019

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVE-2025-21332

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS...

CVE-2016-7237

Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote authenticated users to cause a d...

CVE-2017-0099

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted applicati...

CVE-2018-0757

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are han...

CVE-2018-0846

The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability ...

CVE-2018-8330

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

CVE-2019-0891

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895, CVE-2019-0896,...

CVE-2019-0897

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...

CVE-2019-1039

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...

CVE-2019-1146

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

CVE-2019-1245

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.

CVE-2019-1362

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364.

CVE-2020-0726

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE...

CVE-2020-1376

An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted app...

CVE-2020-1517

An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-16963

Windows Backup Engine Elevation of Privilege Vulnerability

CVE-2021-24077

Windows Fax Service Remote Code Execution Vulnerability

CVE-2021-24088

Windows Local Spooler Remote Code Execution Vulnerability

CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege Vulnerability

CVE-2022-21916

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-22043

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVE-2022-34733

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2022-41056

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

CVE-2023-29368

Windows Filtering Platform Elevation of Privilege Vulnerability

CVE-2023-32020

Windows DNS Spoofing Vulnerability

CVE-2023-35376

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-36889

Windows Group Policy Security Feature Bypass Vulnerability

CVE-2024-30090

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-38117

NTFS Elevation of Privilege Vulnerability