CVE-2020-1472

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a d...

CVE-2021-34527

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

CVE-2022-30190

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, vi...

CVE-2021-1675

Windows Print Spooler Remote Code Execution Vulnerability

CVE-2021-36942

Windows LSA Spoofing Vulnerability

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2021-40444

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.An attacker could craft a malicious ActiveX c...

CVE-2021-31166

HTTP Protocol Stack Remote Code Execution Vulnerability

CVE-2021-40449

Win32k Elevation of Privilege Vulnerability

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-21882

Win32k Elevation of Privilege Vulnerability

CVE-2020-17087

Windows Kernel Local Elevation of Privilege Vulnerability

CVE-2021-42287

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-21971

Windows Runtime Remote Code Execution Vulnerability

CVE-2022-22718

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-21999

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-41379

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-31956

Windows NTFS Elevation of Privilege Vulnerability

CVE-2022-26925

Windows LSA Spoofing Vulnerability

CVE-2021-34484

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-36948

Windows Update Medic Service Elevation of Privilege Vulnerability

CVE-2021-31199

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31979

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVE-2021-31955

Windows Kernel Information Disclosure Vulnerability

CVE-2021-33739

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-21919

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-28310

Win32k Elevation of Privilege Vulnerability

CVE-2021-36955

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2022-22047

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2021-40450

Win32k Elevation of Privilege Vulnerability

CVE-2021-34486

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-41357

Win32k Elevation of Privilege Vulnerability

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVE-2022-26923

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service t...

CVE-2022-26809

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-29130

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-30209

Windows IIS Server Elevation of Privilege Vulnerability

CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability

CVE-2022-22012

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2022-21990

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-22048

BitLocker Security Feature Bypass Vulnerability

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-24503

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...