Lucene search

K
MicrosoftWindows Server 2012

3486 matches found

CVE
CVE
added 2014/11/11 10:55 p.m.79 views

CVE-2014-4118

XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of s...

9.3CVSS8.3AI score0.3441EPSS
CVE
CVE
added 2014/12/11 12:59 a.m.79 views

CVE-2014-6355

The Graphics Component in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly process JPEG images, which makes it easier for remote attackers t...

5CVSS6.2AI score0.13294EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.79 views

CVE-2016-3218

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vu...

7.8CVSS7.5AI score0.02136EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.79 views

CVE-2016-3239

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka "Windo...

7.8CVSS7.6AI score0.00807EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.79 views

CVE-2016-3286

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vu...

7.3CVSS7AI score0.02653EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.79 views

CVE-2016-3332

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted appl...

9.3CVSS7.5AI score0.1385EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.79 views

CVE-2016-7210

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a craft...

6.5CVSS6.5AI score0.35475EPSS
CVE
CVE
added 2016/11/10 6:59 a.m.79 views

CVE-2016-7214

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted a...

3.3CVSS4.7AI score0.01956EPSS
CVE
CVE
added 2017/03/17 12:59 a.m.79 views

CVE-2017-0109

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote...

7.6CVSS6.9AI score0.04458EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.79 views

CVE-2017-0179

A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This C...

6.3CVSS5.4AI score0.00584EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.79 views

CVE-2017-11762

The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way it handles specially ...

8.8CVSS9AI score0.40686EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.79 views

CVE-2017-8463

Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares ...

9.3CVSS7.3AI score0.35569EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.79 views

CVE-2017-8469

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kern...

5.5CVSS4.8AI score0.15731EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.79 views

CVE-2017-8480

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Window...

5CVSS4.8AI score0.15731EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.79 views

CVE-2017-8557

Windows System Information Console in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability improperly parses XML input containing a r...

5.5CVSS5.5AI score0.01506EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.79 views

CVE-2017-8679

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects...

5.5CVSS4.9AI score0.22645EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.79 views

CVE-2017-8687

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when it improperly handles objects...

5.5CVSS5.4AI score0.26895EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.79 views

CVE-2019-1015

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.There are multiple ways an attacker could exploit ...

6.5CVSS5.6AI score0.07622EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.79 views

CVE-2019-1439

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.

6.5CVSS7.1AI score0.32964EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.79 views

CVE-2020-0666

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0667, CVE-2020-0735, CVE-2020-0752.

7.8CVSS8.1AI score0.00511EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.79 views

CVE-2020-0836

A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to...

7.5CVSS7.6AI score0.16255EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.79 views

CVE-2020-0842

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS6.5AI score0.00646EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.79 views

CVE-2020-0857

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.0037EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.79 views

CVE-2020-0963

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1141, CVE-2020-1145, CVE-2020-1179.

6.5CVSS6.5AI score0.2819EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.79 views

CVE-2020-1072

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00881EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.79 views

CVE-2020-1252

A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application.An attacker who successfully exploited this vulnerability could execute arbitrary code and ta...

7.8CVSS8.4AI score0.08862EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.79 views

CVE-2020-1437

An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.

7.8CVSS8.5AI score0.003EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.79 views

CVE-2021-26862

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00469EPSS
CVE
CVE
added 2021/03/11 4:15 p.m.79 views

CVE-2021-27063

Windows DNS Server Denial of Service Vulnerability

7.5CVSS8.4AI score0.12525EPSS
CVE
CVE
added 2023/12/12 6:15 p.m.79 views

CVE-2023-35629

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

6.8CVSS7.6AI score0.00217EPSS
CVE
CVE
added 2023/12/12 6:15 p.m.79 views

CVE-2023-35641

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.04439EPSS
CVE
CVE
added 2023/12/12 6:15 p.m.79 views

CVE-2023-35643

DHCP Server Service Information Disclosure Vulnerability

7.5CVSS7.8AI score0.00729EPSS
CVE
CVE
added 2024/07/09 5:15 p.m.79 views

CVE-2024-30079

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00677EPSS
CVE
CVE
added 2024/06/11 5:15 p.m.79 views

CVE-2024-30093

Windows Storage Elevation of Privilege Vulnerability

7.3CVSS8.2AI score0.00783EPSS
CVE
CVE
added 2024/07/09 5:15 p.m.79 views

CVE-2024-35270

Windows iSCSI Service Denial of Service Vulnerability

5.3CVSS7AI score0.00421EPSS
CVE
CVE
added 2024/08/13 6:15 p.m.79 views

CVE-2024-38145

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

7.5CVSS7.5AI score0.27186EPSS
CVE
CVE
added 2024/09/10 5:15 p.m.79 views

CVE-2024-38260

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.10128EPSS
CVE
CVE
added 2024/11/12 6:15 p.m.79 views

CVE-2024-43450

Windows DNS Spoofing Vulnerability

7.5CVSS7.5AI score0.0049EPSS
CVE
CVE
added 2024/11/12 6:15 p.m.79 views

CVE-2024-43643

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00259EPSS
CVE
CVE
added 2025/01/14 6:15 p.m.79 views

CVE-2025-21237

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.00461EPSS
CVE
CVE
added 2025/03/11 5:16 p.m.79 views

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

6.5CVSS6.9AI score0.00238EPSS
CVE
CVE
added 2025/04/08 6:15 p.m.79 views

CVE-2025-26665

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.

7CVSS7.1AI score0.00036EPSS
CVE
CVE
added 2025/04/08 6:15 p.m.79 views

CVE-2025-26686

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

7.5CVSS7.5AI score0.00151EPSS
CVE
CVE
added 2025/04/08 6:15 p.m.79 views

CVE-2025-27474

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

6.5CVSS6.9AI score0.00229EPSS
CVE
CVE
added 2025/04/08 6:16 p.m.79 views

CVE-2025-27740

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

8.8CVSS7.3AI score0.0071EPSS
CVE
CVE
added 2012/09/26 10:56 a.m.78 views

CVE-2012-2897

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly ...

10CVSS7.3AI score0.31315EPSS
CVE
CVE
added 2013/12/11 12:55 a.m.78 views

CVE-2013-5058

Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted application...

6.9CVSS6.4AI score0.03623EPSS
CVE
CVE
added 2014/08/12 9:55 p.m.78 views

CVE-2014-0316

Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (memory consumption) and bypass the ASLR protec...

7.5CVSS6.5AI score0.08989EPSS
CVE
CVE
added 2015/01/13 10:59 p.m.78 views

CVE-2015-0001

The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging admin...

1.9CVSS6.3AI score0.00548EPSS
CVE
CVE
added 2015/07/14 9:59 p.m.78 views

CVE-2015-2368

Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."

6.9CVSS7AI score0.09391EPSS
Total number of security vulnerabilities3486