CVE-2023-36726

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

CVE-2023-36732

Win32k Elevation of Privilege Vulnerability

CVE-2025-29974

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2023-36572

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36583

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2022-24503

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-36582

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36585

Windows upnphost.dll Denial of Service Vulnerability

CVE-2023-36598

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT AUTHORITY\sy...

CVE-2023-36724

Windows Power Management Service Information Disclosure Vulnerability

CVE-2025-21337

Windows NTFS Elevation of Privilege Vulnerability

CVE-2024-26161

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2022-22048

BitLocker Security Feature Bypass Vulnerability

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability

CVE-2022-26937

Windows Network File System Remote Code Execution Vulnerability

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

CVE-2017-0055

Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run scr...

CVE-2019-0836

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.

CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2025-21189

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2021-26414

Windows DCOM Server Security Feature Bypass

CVE-2023-29325

Windows OLE Remote Code Execution Vulnerability

CVE-2011-2016

Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a direc...

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

CVE-2022-30133

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2012-0002

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2024-43461

Windows MSHTML Platform Spoofing Vulnerability

CVE-2020-1269

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

CVE-2018-0824

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2...

CVE-2022-34721

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVE-2025-24983

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-29324

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2025-21418

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2019-1006

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

CVE-2020-0611

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

CVE-2022-24528

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2023-36876

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability