CVE-2019-1074

An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic link attack. An attacker who successfully exploited this vulnerability could potentially access unauthorized information. The update addresses this vul...

CVE-2021-1696

Windows Graphics Component Information Disclosure Vulnerability

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability

CVE-2023-32041

Windows Update Orchestrator Service Information Disclosure Vulnerability

CVE-2024-30066

Winlogon Elevation of Privilege Vulnerability

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

CVE-2018-8492

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, ...

CVE-2019-1158

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.There are multiple ways an attacker could exploit th...

CVE-2019-1391

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207.

CVE-2020-1160

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

CVE-2021-1731

PFX Encryption Security Feature Bypass Vulnerability

CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

CVE-2021-38637

Windows Storage Information Disclosure Vulnerability

CVE-2024-30039

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2019-1097

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.

CVE-2019-1163

A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.To exploit the vulnerability, an attacker could modify a signed CAB file and...

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2022-35832

Windows Event Tracing Denial of Service Vulnerability

CVE-2022-37996

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2025-27742

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

CVE-2020-0987

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE-2020-1005.

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

CVE-2024-38055

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVE-2019-0942

An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry, aka 'Unified Write Filter Elevation of Privilege Vulnerability'.

CVE-2020-1194

A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability

CVE-2022-21998

Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2023-32039

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2019-1187

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.A remote unauthenticated attacker could exploit this vulnerability by iss...

CVE-2020-1296

A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & feedback Information Disclosure Vulnerability'.

CVE-2021-1683

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...

CVE-2024-30065

Windows Themes Denial of Service Vulnerability

CVE-2019-0733

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.

CVE-2020-0955

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure in CPU Memory Access'.

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

CVE-2021-1672

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability

CVE-2022-35758

Windows Kernel Memory Information Disclosure Vulnerability

CVE-2023-33174

Windows Cryptographic Information Disclosure Vulnerability

CVE-2024-30034

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2025-32720

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

CVE-2019-1474

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1472.

CVE-2020-0744

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.

CVE-2020-17094

Windows Error Reporting Information Disclosure Vulnerability

CVE-2021-34509

Storage Spaces Controller Information Disclosure Vulnerability

CVE-2023-35324

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability