1155 matches found
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG ...
CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-40449
Win32k Elevation of Privilege Vulnerability
CVE-2022-24521
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-21882
Win32k Elevation of Privilege Vulnerability
CVE-2023-36884
Windows Search Remote Code Execution Vulnerability
CVE-2022-22718
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-41379
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-21999
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-22047
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2021-40450
Win32k Elevation of Privilege Vulnerability
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-41357
Win32k Elevation of Privilege Vulnerability
CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2023-36802
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-41073
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41125
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-35355
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36805
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-38142
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2023-38162
DHCP Server Service Denial of Service Vulnerability
CVE-2023-38144
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-32046
Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-38161
Windows GDI Elevation of Privilege Vulnerability
CVE-2022-37967
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2023-38149
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36804
Windows GDI Elevation of Privilege Vulnerability
CVE-2024-38202
SummaryMicrosoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attack...
CVE-2023-38143
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-38141
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38039
When curl retrieves an HTTP response, it stores the incoming headers so thatthey can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it wouldaccept in a response, allowing a malicious server to stream an endless seriesof headers and...
CVE-2023-38139
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability