CVE-2018-8544

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 201...

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-40461

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-21878

Windows Geolocation Service Remote Code Execution Vulnerability

CVE-2022-41113

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2023-23410

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-36404

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36427

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2024-26200

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-26209

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2024-26218

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26255

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-24537

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-24549

Windows AppX Package Manager Elevation of Privilege Vulnerability

CVE-2022-30215

Active Directory Federation Services Elevation of Privilege Vulnerability

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

CVE-2024-20661

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-20662

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVE-2024-26228

Windows Cryptographic Services Security Feature Bypass Vulnerability

CVE-2024-43560

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability

CVE-2018-8626

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

CVE-2020-16913

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

CVE-2022-30222

Windows Shell Remote Code Execution Vulnerability

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21767

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2024-26210

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

CVE-2019-1065

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...

CVE-2020-16996

Kerberos Security Feature Bypass Vulnerability

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability

CVE-2021-34444

Windows DNS Server Denial of Service Vulnerability

CVE-2021-34445

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

CVE-2022-24479

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2023-24947

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVE-2023-28297

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability

CVE-2025-32709

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.