CVE-2018-8611

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...

CVE-2023-24880

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2019-1388

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

CVE-2023-29336

Win32k Elevation of Privilege Vulnerability

CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store ...

CVE-2022-38023

Netlogon RPC Elevation of Privilege Vulnerability

CVE-2023-23376

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36803

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36434

Windows IIS Server Elevation of Privilege Vulnerability

CVE-2023-38147

Windows Miracast Wireless Display Remote Code Execution Vulnerability

CVE-2018-5391

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation hav...

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2022-26809

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.To exploit this vulnerability, an attacker would have to log on to an a...

CVE-2022-29130

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-30209

Windows IIS Server Elevation of Privilege Vulnerability

CVE-2023-23415

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802...

CVE-2023-32049

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-38162

DHCP Server Service Denial of Service Vulnerability

CVE-2018-0886

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execu...

CVE-2023-32046

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVE-2022-37967

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2023-36801

DHCP Server Service Information Disclosure Vulnerability

CVE-2023-28229

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ...

CVE-2023-38161

Windows GDI Elevation of Privilege Vulnerability

CVE-2024-26169

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2024-38202

SummaryMicrosoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attack...

CVE-2023-36804

Windows GDI Elevation of Privilege Vulnerability

CVE-2023-38152

DHCP Server Service Information Disclosure Vulnerability

CVE-2019-1181

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...

CVE-2023-35349

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-21351

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-36577

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2022-37966

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

CVE-2022-22012

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2023-38159

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-36722

Active Directory Domain Services Information Disclosure Vulnerability

CVE-2023-36702

Microsoft DirectMusic Remote Code Execution Vulnerability

CVE-2023-36589

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36602

Windows TCP/IP Denial of Service Vulnerability

CVE-2023-36711

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

CVE-2023-36567

Windows Deployment Services Information Disclosure Vulnerability

CVE-2023-41767

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVE-2023-36436

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-36596

Remote Procedure Call Information Disclosure Vulnerability

CVE-2023-36571

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability