Lucene search

K
MicrosoftWindows Server 2016-

2649 matches found

CVE
CVE
added 2020/04/15 3:15 p.m.92 views

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.

5.5CVSS5.6AI score0.27512EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.92 views

CVE-2020-0983

An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-1009, CVE-2020-1011, CVE-2020-1015.

7.8CVSS7.8AI score0.08877EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.92 views

CVE-2020-1071

An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog, aka 'Windows Remote Access Common Dialog Elevation of Privilege Vulnerability'.

7.2CVSS7.8AI score0.00288EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.92 views

CVE-2020-1212

An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.

7.8CVSS8.2AI score0.12995EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.92 views

CVE-2020-1400

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.

9.3CVSS8.4AI score0.35463EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.92 views

CVE-2020-1404

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413, CVE-2020-1414, CVE-2020-141...

7.8CVSS7.7AI score0.00513EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.92 views

CVE-2020-1428

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1438.

7.8CVSS8.1AI score0.00513EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.92 views

CVE-2020-16905

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.An attacker who successfully exploited the vulnerability could gain greater access to ...

7.8CVSS7.3AI score0.00838EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.92 views

CVE-2020-17033

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00514EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.92 views

CVE-2020-17041

Windows Print Configuration Elevation of Privilege Vulnerability

7.8CVSS8.4AI score0.00428EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.92 views

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

7.8CVSS8.8AI score0.0073EPSS
CVE
CVE
added 2020/12/10 12:15 a.m.92 views

CVE-2020-17094

Windows Error Reporting Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00778EPSS
CVE
CVE
added 2021/02/25 11:15 p.m.92 views

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability

8.8CVSS8.5AI score0.10614EPSS
CVE
CVE
added 2021/07/14 6:15 p.m.92 views

CVE-2021-34509

Storage Spaces Controller Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00429EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.92 views

CVE-2021-43233

Remote Desktop Client Remote Code Execution Vulnerability

7.5CVSS8.8AI score0.01027EPSS
CVE
CVE
added 2023/05/31 7:15 p.m.92 views

CVE-2022-35753

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS9AI score0.02251EPSS
CVE
CVE
added 2022/12/13 7:15 p.m.92 views

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00111EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.92 views

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability

7.5CVSS7.6AI score0.00432EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.92 views

CVE-2023-35324

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

5.5CVSS7AI score0.00229EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.92 views

CVE-2023-35344

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS8.1AI score0.00226EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.92 views

CVE-2023-36871

Azure Active Directory Security Feature Bypass Vulnerability

6.5CVSS7.8AI score0.00262EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.91 views

CVE-2017-0285

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, and Microsoft Office Word Viewer allows improper disclosure of ...

5CVSS4.9AI score0.17084EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.91 views

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability".

5.3CVSS5.9AI score0.07505EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.91 views

CVE-2018-0926

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memo...

5.5CVSS4.7AI score0.11699EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.91 views

CVE-2018-8347

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

7.8CVSS7.8AI score0.0023EPSS
CVE
CVE
added 2019/08/14 9:15 p.m.91 views

CVE-2019-1186

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted...

7CVSS7.3AI score0.00304EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.91 views

CVE-2019-1267

An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability'.

7.8CVSS7.8AI score0.00469EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.91 views

CVE-2019-1272

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulne...

7.8CVSS8AI score0.00372EPSS
CVE
CVE
added 2019/10/10 2:15 p.m.91 views

CVE-2019-1358

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1359.

9.3CVSS8.8AI score0.58897EPSS
CVE
CVE
added 2019/11/12 7:15 p.m.91 views

CVE-2019-1406

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

9.3CVSS8.9AI score0.33652EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.91 views

CVE-2020-0691

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020...

7.8CVSS7.7AI score0.00549EPSS
CVE
CVE
added 2020/02/11 10:15 p.m.91 views

CVE-2020-0720

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE...

7.8CVSS7.7AI score0.00549EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.91 views

CVE-2020-0843

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerabi...

7.8CVSS6.5AI score0.00646EPSS
CVE
CVE
added 2020/03/12 4:15 p.m.91 views

CVE-2020-0881

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.

9.3CVSS8.8AI score0.5256EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.91 views

CVE-2020-0904

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtua...

6.5CVSS7AI score0.00907EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.91 views

CVE-2020-0922

A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted file...

9.3CVSS8.7AI score0.1622EPSS
CVE
CVE
added 2020/04/15 3:15 p.m.91 views

CVE-2020-0949

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.

9.3CVSS8.7AI score0.2125EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.91 views

CVE-2020-1053

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with ful...

7.8CVSS8.1AI score0.00512EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.91 views

CVE-2020-1146

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security...

7.8CVSS7.4AI score0.00681EPSS
CVE
CVE
added 2020/06/09 8:15 p.m.91 views

CVE-2020-1314

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

7.8CVSS8AI score0.13831EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.91 views

CVE-2020-1411

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.

7.8CVSS8.2AI score0.00505EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.91 views

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

5.5CVSS7AI score0.00446EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.91 views

CVE-2021-1685

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.00662EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.91 views

CVE-2021-1693

Windows CSC Service Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00313EPSS
CVE
CVE
added 2021/04/13 8:15 p.m.91 views

CVE-2021-28328

Windows DNS Information Disclosure Vulnerability

6.5CVSS7.1AI score0.11531EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.91 views

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00222EPSS
CVE
CVE
added 2022/05/10 9:15 p.m.91 views

CVE-2022-29114

Windows Print Spooler Information Disclosure Vulnerability

5.5CVSS7.1AI score0.00206EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.91 views

CVE-2023-33164

Remote Procedure Call Runtime Denial of Service Vulnerability

6.5CVSS7.8AI score0.03672EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.91 views

CVE-2023-35338

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

7.5CVSS8.4AI score0.03356EPSS
CVE
CVE
added 2023/07/11 6:15 p.m.91 views

CVE-2023-35348

Active Directory Federation Service Security Feature Bypass Vulnerability

6.5CVSS7.8AI score0.00439EPSS
Total number of security vulnerabilities2649