Lucene search
+L
MicrosoftWindows Server 2016

5098 matches found

CVE
CVE
added 2018/08/15 5:00 p.m.122 views

CVE-2018-8200

CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...

5.3CVSS6.7AI score0.01412EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.122 views

CVE-2021-1661

Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

7.8CVSS8.1AI score0.0082EPSS
Save
CVE
CVE
added 2018/06/14 12:00 p.m.121 views

CVE-2018-8221

The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...

5.3CVSS5.2AI score0.02137EPSS
Save
CVE
CVE
added 2018/09/13 12:00 a.m.121 views

CVE-2018-8433

Technical details about CVE-2018-8433 are not publicly provided in the connected documents. Monitor for updates.

4.7CVSS5.2AI score0.02634EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.121 views

CVE-2019-0733

Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.

5.3CVSS5.8AI score0.01178EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.121 views

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

9.3CVSS7.6AI score0.04207EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.121 views

CVE-2019-1022

CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...

7.8CVSS7.8AI score0.00884EPSS
Save
CVE
CVE
added 2019/11/12 6:53 p.m.121 views

CVE-2019-1411

CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...

6.5CVSS7.1AI score0.05233EPSS
Save
CVE
CVE
added 2020/01/14 11:11 p.m.121 views

CVE-2020-0621

CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...

4.4CVSS6.7AI score0.00972EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.121 views

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

5.5CVSS6.4AI score0.00992EPSS
Save
CVE
CVE
added 2020/09/11 5:08 p.m.121 views

CVE-2020-0838

CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...

7.8CVSS7.7AI score0.00996EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.121 views

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...

9.3CVSS8.8AI score0.16784EPSS
Save
CVE
CVE
added 2020/04/15 3:13 p.m.121 views

CVE-2020-0982

CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...

5.5CVSS6.2AI score0.01363EPSS
Save
CVE
CVE
added 2020/09/11 5:08 p.m.121 views

CVE-2020-1091

Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.

6.5CVSS6.9AI score0.04477EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.121 views

CVE-2020-1235

Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.

7.8CVSS7.7AI score0.03001EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.121 views

CVE-2020-1282

Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.

7.8CVSS7.7AI score0.03291EPSS
Save
CVE
CVE
added 2020/07/14 10:54 p.m.121 views

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

6.7CVSS7.7AI score0.00921EPSS
Save
CVE
CVE
added 2020/07/14 10:54 p.m.121 views

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

9.3CVSS9.3AI score0.1398EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.121 views

CVE-2020-1556

CVE-2020-1556 affects Windows WalletService. It is an Elevation of Privilege vulnerability arising from how WalletService handles objects in memory, enabling a locally authenticated attacker to run a crafted application and execute code with elevated permissions. Exploitation requires local acces...

7.8CVSS7.9AI score0.00931EPSS
Save
CVE
CVE
added 2020/11/11 6:48 a.m.121 views

CVE-2020-17010

CVE-2020-17010 is a local Win32k elevation-of-privilege vulnerability in Microsoft Windows. It affects Win32k/Windows components and could allow an attacker to obtain SYSTEM-level privileges on a vulnerable host, with CVSS indicating LOCAL access, LOW attack complexity, and HIGH impact to confide...

7.8CVSS7.6AI score0.01547EPSS
Save
CVE
CVE
added 2020/11/11 6:48 a.m.121 views

CVE-2020-17011

CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...

7.8CVSS8.6AI score0.01044EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.121 views

CVE-2021-1685

CVE-2021-1685 is a Windows AppX Deployment Extensions Elevation of Privilege vulnerability. Affected component: Windows AppX Deployment Extensions. Exploitation is local with low attack complexity; privileges required are LOW and user interaction is not required per CVSS details, leading to parti...

7.8CVSS7.8AI score0.00928EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.121 views

CVE-2021-1710

Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.

7.8CVSS8.2AI score0.02984EPSS
Save
CVE
CVE
added 2021/09/15 11:23 a.m.121 views

CVE-2021-36973

Technical details about CVE-2021-36973 (affected components, root cause, impact, vulnerable versions, and fixes) are not provided in the connected documents. Monitor official sources (Microsoft security guidance, NVD) for updates and remediation information.

7.8CVSS7.7AI score0.00523EPSS
Save
CVE
CVE
added 2021/12/15 2:15 p.m.121 views

CVE-2021-43223

CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...

7.8CVSS8.6AI score0.0053EPSS
Save
CVE
CVE
added 2022/08/09 8:06 p.m.121 views

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

7.8CVSS8.6AI score0.00654EPSS
Save
CVE
CVE
added 2023/07/11 5:02 p.m.121 views

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

6.5CVSS7.8AI score0.0163EPSS
Save
CVE
CVE
added 2023/07/11 5:02 p.m.121 views

CVE-2023-35357

CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...

7.8CVSS8.6AI score0.00872EPSS
Save
CVE
CVE
added 2024/06/11 4:59 p.m.121 views

CVE-2024-30062

CVE-2024-30062 affects Windows Standards-Based Storage Management Service. The connected data documents confirm a local, user-interaction–required remote code execution vulnerability in Windows Storage components, with CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 7.8). The issue is tied to...

7.8CVSS8.8AI score0.01005EPSS
Save
CVE
CVE
added 2024/06/11 4:59 p.m.121 views

CVE-2024-30076

Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.

6.8CVSS7.9AI score0.01711EPSS
Save
CVE
CVE
added 2024/06/11 4:59 p.m.121 views

CVE-2024-30082

Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.

7.8CVSS8.7AI score0.01269EPSS
Save
CVE
CVE
added 2024/07/09 5:02 p.m.121 views

CVE-2024-38022

Technical details about CVE-2024-38022 are not provided in the connected documents; no affected products, root cause, or fixes are described here. Monitor for updates from official sources.

7CVSS7.6AI score0.00571EPSS
Save
CVE
CVE
added 2024/07/09 5:03 p.m.121 views

CVE-2024-38028

Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.

7.2CVSS8.3AI score0.0207EPSS
Save
CVE
CVE
added 2024/07/09 5:03 p.m.121 views

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

8.8CVSS9.3AI score0.01147EPSS
Save
CVE
CVE
added 2024/08/13 5:30 p.m.121 views

CVE-2024-38116

Technical details for CVE-2024-38116 are not publicly available in the provided documents; monitor for updates.

8.8CVSS9AI score0.01818EPSS
Save
CVE
CVE
added 2024/08/13 5:30 p.m.121 views

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

4.2CVSS4.6AI score0.01685EPSS
Save
CVE
CVE
added 2024/12/10 5:49 p.m.121 views

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

8.8CVSS8.9AI score0.01664EPSS
Save
CVE
CVE
added 2025/01/14 6:04 p.m.121 views

CVE-2025-21225

Technical details about CVE-2025-21225 (WindowsRD Gateway Denial-of-Service) are not provided in the connected documents. Public details appear only as vulnerability entries; monitor official advisories and patch guidance for remediation and impact updates.

5.9CVSS5.8AI score0.01553EPSS
Save
CVE
CVE
added 2025/01/14 6:03 p.m.121 views

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

7.8CVSS7.7AI score0.00605EPSS
Save
CVE
CVE
added 2025/04/08 5:23 p.m.121 views

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

8.1CVSS7.9AI score0.10428EPSS
Save
CVE
CVE
added 2016/11/10 6:16 a.m.120 views

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

7.8CVSS7.6AI score0.01432EPSS
Save
CVE
CVE
added 2017/03/17 12:00 a.m.120 views

CVE-2017-0076

Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...

5.4CVSS5.2AI score0.01594EPSS
Save
CVE
CVE
added 2017/05/12 2:00 p.m.120 views

CVE-2017-0171

CVE-2017-0171 is a Windows DNS Server denial-of-service vulnerability. The affected products include Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016, where the DNS service could be overwhelmed when answering version queries, leading to a denial of serv...

5.9CVSS6.2AI score0.0406EPSS
Save
CVE
CVE
added 2017/06/15 1:00 a.m.120 views

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

7.8CVSS5.7AI score0.01315EPSS
Save
CVE
CVE
added 2017/10/13 1:00 p.m.120 views

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

7CVSS7.9AI score0.02501EPSS
Save
CVE
CVE
added 2018/04/12 1:00 a.m.120 views

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

5.5CVSS5AI score0.03508EPSS
Save
CVE
CVE
added 2018/05/09 7:00 p.m.120 views

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

7CVSS7.5AI score0.01042EPSS
Save
CVE
CVE
added 2018/06/14 12:00 p.m.120 views

CVE-2018-8201

CVE-2018-8201 describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10 (including Windows 10 servers). The vulnerability stems from bypas...

4.5CVSS5.2AI score0.01941EPSS
Save
CVE
CVE
added 2018/09/13 12:00 a.m.120 views

CVE-2018-8462

CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...

7.8CVSS7.5AI score0.01192EPSS
Save
CVE
CVE
added 2019/07/15 6:56 p.m.120 views

CVE-2019-0811

Technical details about CVE-2019-0811 (affected products, root cause, impact, fixes) are not provided in the connected documents. Please monitor for updates.

7.5CVSS7.1AI score0.04502EPSS
Save
Total number of security vulnerabilities5098