3043 matches found
CVE-2020-0670
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672.
CVE-2020-0677
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addre...
CVE-2020-0707
An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'.
CVE-2020-0788
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0877, CVE-2020-0887.
CVE-2021-1706
Windows LUAFV Elevation of Privilege Vulnerability
CVE-2021-31970
Windows TCP/IP Driver Security Feature Bypass Vulnerability
CVE-2021-31975
Server for NFS Information Disclosure Vulnerability
CVE-2021-34493
Windows Partition Management Driver Elevation of Privilege Vulnerability
CVE-2021-34507
Windows Remote Assistance Information Disclosure Vulnerability
CVE-2021-38663
Windows exFAT File System Information Disclosure Vulnerability
CVE-2021-40443
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-41347
Windows AppX Deployment Service Elevation of Privilege Vulnerability
CVE-2022-21895
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24466
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2022-26792
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-26794
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-38006
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-41102
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2023-21677
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21688
NT OS Kernel Elevation of Privilege Vulnerability
CVE-2023-28268
Netlogon RPC Elevation of Privilege Vulnerability
CVE-2023-29346
NTFS Elevation of Privilege Vulnerability
CVE-2023-35313
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
CVE-2024-38074
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2018-8129
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958, CVE-2018-81...
CVE-2019-0896
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0894, CVE-2019-0895,...
CVE-2019-1285
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1256.
CVE-2019-1318
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
CVE-2020-0631
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627...
CVE-2020-0681
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
CVE-2020-0814
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...
CVE-2021-33782
Windows Authenticode Spoofing Vulnerability
CVE-2021-36972
Windows SMB Information Disclosure Vulnerability
CVE-2021-40478
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-41361
Active Directory Federation Server Spoofing Vulnerability
CVE-2022-21958
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21993
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2022-22031
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
CVE-2022-26826
Windows DNS Server Remote Code Execution Vulnerability
CVE-2022-29103
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2022-41074
Windows Graphics Component Information Disclosure Vulnerability
CVE-2023-32008
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2023-35302
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-36912
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2024-30010
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-30036
Windows Deployment Services Information Disclosure Vulnerability
CVE-2024-38058
BitLocker Security Feature Bypass Vulnerability
CVE-2025-24068
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-27482
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2018-8424
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....