CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

CVE-2021-38628

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2021-40461

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-21878

Windows Geolocation Service Remote Code Execution Vulnerability

CVE-2022-41113

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2023-23410

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-36404

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36427

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2022-22014

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-24537

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-24540

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-24549

Windows AppX Package Manager Elevation of Privilege Vulnerability

CVE-2022-30215

Active Directory Federation Services Elevation of Privilege Vulnerability

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

CVE-2024-20661

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-20662

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVE-2018-8626

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

CVE-2020-16913

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

CVE-2022-30222

Windows Shell Remote Code Execution Vulnerability

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21767

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

CVE-2019-1065

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...

CVE-2019-1291

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1290.

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.To exploit the vulnerability, an attacker would first need code execution on a victim system. An...

CVE-2020-16996

Kerberos Security Feature Bypass Vulnerability

CVE-2021-34438

Windows Font Driver Host Remote Code Execution Vulnerability

CVE-2021-34444

Windows DNS Server Denial of Service Vulnerability

CVE-2021-34445

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

CVE-2022-24479

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVE-2022-26796

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-26935

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2023-24947

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVE-2023-28297

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

CVE-2021-31958

Windows NTLM Elevation of Privilege Vulnerability

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-26816

Windows DNS Server Information Disclosure Vulnerability

CVE-2022-30203

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2023-21683

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVE-2023-24910

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2021-1638

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2021-34449

Win32k Elevation of Privilege Vulnerability

CVE-2021-34459

Windows AppContainer Elevation Of Privilege Vulnerability