CVE-2020-0739

An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0737.

CVE-2020-0761

A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System AccountTo exploit the vulnerability, an authent...

CVE-2020-0858

An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CV...

CVE-2020-0960

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994,...

CVE-2020-0964

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

CVE-2020-1091

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.There are multiple ways an attacker could exploit th...

CVE-2020-1160

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

CVE-2020-1162

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2020-1282

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306, CVE-2020-133...

CVE-2020-1466

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to...

CVE-2020-16895

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status.To exploit this vulnerability, an attacker would first have to...

CVE-2021-1697

Windows InstallService Elevation of Privilege Vulnerability

CVE-2021-1731

PFX Encryption Security Feature Bypass Vulnerability

CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-38637

Windows Storage Information Disclosure Vulnerability

CVE-2022-26797

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-35833

Windows Secure Channel Denial of Service Vulnerability

CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21697

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVE-2023-28276

Windows Group Policy Security Feature Bypass Vulnerability

CVE-2023-32056

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

CVE-2023-35328

Windows Transaction Manager Elevation of Privilege Vulnerability

CVE-2023-36913

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2024-30003

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30005

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-30089

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-38031

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVE-2024-38049

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

CVE-2024-38062

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

CVE-2024-38143

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

CVE-2024-43627

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-43629

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-43636

Win32k Elevation of Privilege Vulnerability

CVE-2025-21270

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

CVE-2025-21368

Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2025-24035

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2025-24058

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2019-0965

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

CVE-2019-1022

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

CVE-2019-1060

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.