CVE-2022-34302

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currentl...

CVE-2022-34719

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

CVE-2023-23421

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35387

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

CVE-2024-38033

PowerShell Elevation of Privilege Vulnerability

CVE-2024-38152

Windows OLE Remote Code Execution Vulnerability

CVE-2018-0752

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation of...

CVE-2018-0753

Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vulnerability due to the way objects are handled in memory, aka "Windows IPSec Denial of Service Vulnerability".

CVE-2018-0816

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerab...

CVE-2018-0965

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. Th...

CVE-2018-1015

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Win...

CVE-2019-0549

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

CVE-2019-0554

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

CVE-2019-0617

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

CVE-2019-0632

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.

CVE-2019-0842

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s systemTo exploit this vulnerability, an attacker would need to run a special...

CVE-2020-16939

An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have to log on to the system, and then run a speciall...

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-31170

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2021-33746

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-36970

Windows Print Spooler Spoofing Vulnerability

CVE-2021-38638

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-41342

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability

CVE-2022-21905

Windows Hyper-V Security Feature Bypass Vulnerability

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability

CVE-2022-21914

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2022-23299

Windows PDEV Elevation of Privilege Vulnerability

CVE-2022-29138

Windows Clustered Shared Volume Elevation of Privilege Vulnerability

CVE-2022-37956

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-41100

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2023-21532

Windows GDI Elevation of Privilege Vulnerability

CVE-2023-21680

Windows Win32k Elevation of Privilege Vulnerability

CVE-2023-21728

Windows Netlogon Denial of Service Vulnerability

CVE-2023-21747

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-24886

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVE-2023-28266

Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2023-28273

Windows Clip Service Elevation of Privilege Vulnerability

CVE-2023-28298

Windows Kernel Denial of Service Vulnerability

CVE-2023-32011

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVE-2023-35352

Windows Remote Desktop Security Feature Bypass Vulnerability

CVE-2023-35381

Windows Fax Service Remote Code Execution Vulnerability

CVE-2024-38132

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2024-49105

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2018-0745

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-...