CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2024-20674

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2024-38213

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2024-21407

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2019-1006

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

CVE-2022-24491

Windows Network File System Remote Code Execution Vulnerability

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

CVE-2022-24500

Windows SMB Remote Code Execution Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features.To exploit t...

CVE-2024-38178

Scripting Engine Memory Corruption Vulnerability

CVE-2019-0796

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

CVE-2020-0611

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

CVE-2022-24528

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2024-21438

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2022-21977

Media Foundation Information Disclosure Vulnerability

CVE-2024-21416

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

CVE-2019-0821

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704.

CVE-2022-21972

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.

CVE-2022-24547

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2022-24545

Windows Kerberos Remote Code Execution Vulnerability

CVE-2023-28293

Windows Kernel Elevation of Privilege Vulnerability

CVE-2019-0730

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2024-26207

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2022-24497

Windows Network File System Remote Code Execution Vulnerability

CVE-2022-26931

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2019-0704

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0821.

CVE-2019-0731

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

CVE-2020-1599

Windows Spoofing Vulnerability

CVE-2021-34487

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2023-36405

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21427

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2025-24985

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVE-2024-38106

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-23284

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26939

Storage Spaces Direct Elevation of Privilege Vulnerability

CVE-2023-28250

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2024-20652

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2019-0805

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.

CVE-2021-43217

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

CVE-2019-1226

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...