3407 matches found
CVE-2019-1019
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...
CVE-2020-16996
Kerberos Security Feature Bypass Vulnerability
CVE-2021-34444
Windows DNS Server Denial of Service Vulnerability
CVE-2022-30203
Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2022-34706
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2023-21767
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2023-28297
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
CVE-2024-26210
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2018-1016
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...
CVE-2019-1291
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.
CVE-2020-1537
An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...
CVE-2022-21922
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-22026
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-26796
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-26935
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
CVE-2022-41058
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2018-8550
An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...
CVE-2019-0785
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
CVE-2021-31958
Windows NTLM Elevation of Privilege Vulnerability
CVE-2021-34459
Windows AppContainer Elevation Of Privilege Vulnerability
CVE-2023-21683
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-24910
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-21313
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-26168
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26217
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26239
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2017-0267
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles...
CVE-2018-0878
Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how X...
CVE-2019-0555
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Serve...
CVE-2021-1658
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-34708
Windows Kernel Information Disclosure Vulnerability
CVE-2022-38040
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21750
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-28897
Secure Boot Security Feature Bypass Vulnerability
CVE-2025-21327
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2021-31959
Scripting Engine Memory Corruption Vulnerability
CVE-2021-33750
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2022-22050
Windows Fax Service Elevation of Privilege Vulnerability
CVE-2022-30208
Windows Security Account Manager (SAM) Denial of Service Vulnerability
CVE-2022-33634
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-37988
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-24900
Windows NTLM Security Support Provider Information Disclosure Vulnerability
CVE-2023-28251
Windows Driver Revocation List Security Feature Bypass Vulnerability
CVE-2023-28253
Windows Kernel Information Disclosure Vulnerability
CVE-2024-26208
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-28901
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2018-0744
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege...
CVE-2019-0881
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2022-26810
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
CVE-2022-26818
Windows DNS Server Remote Code Execution Vulnerability