2183 matches found
CVE-2025-24058
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2021-38637
Windows Storage Information Disclosure Vulnerability
CVE-2021-41336
Windows Kernel Information Disclosure Vulnerability
CVE-2022-26797
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-34726
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-35833
Windows Secure Channel Denial of Service Vulnerability
CVE-2022-37989
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-44683
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28276
Windows Group Policy Security Feature Bypass Vulnerability
CVE-2023-32056
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
CVE-2023-35312
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
CVE-2023-35328
Windows Transaction Manager Elevation of Privilege Vulnerability
CVE-2023-36913
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-30003
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30005
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30039
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30089
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-38031
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-38049
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVE-2024-38062
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-38064
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-38079
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38143
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVE-2024-43627
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43629
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability
CVE-2024-49117
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2025-21190
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21222
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
CVE-2025-21254
Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21276
Windows MapUrlToZone Denial of Service Vulnerability
CVE-2025-21308
Windows Themes Spoofing Vulnerability
CVE-2025-24074
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2025-27479
Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2025-27742
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVE-2021-42274
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
CVE-2022-26807
Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2022-34731
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-35832
Windows Event Tracing Denial of Service Vulnerability
CVE-2022-37996
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-44677
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2023-28233
Windows Secure Channel Denial of Service Vulnerability
CVE-2023-32055
Active Template Library Elevation of Privilege Vulnerability
CVE-2023-35362
Windows Clip Service Elevation of Privilege Vulnerability
CVE-2024-30012
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30081
Windows NTLM Spoofing Vulnerability
CVE-2024-49116
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21215
Secure Boot Security Feature Bypass Vulnerability
CVE-2025-21255
Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-26678
Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.