CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVE-2024-30078

Windows Wi-Fi Driver Remote Code Execution Vulnerability

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013?We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format i...

CVE-2021-34527

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

CVE-2023-50387

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG ...

CVE-2022-30190

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, vi...

CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2021-40444

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.An attacker could craft a malicious ActiveX c...

CVE-2021-40449

Win32k Elevation of Privilege Vulnerability

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-21882

Win32k Elevation of Privilege Vulnerability

CVE-2021-42287

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2023-36884

Windows Search Remote Code Execution Vulnerability

CVE-2022-21971

Windows Runtime Remote Code Execution Vulnerability

CVE-2022-22718

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2023-21554

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2022-21999

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-41379

Windows Installer Elevation of Privilege Vulnerability

CVE-2022-26925

Windows LSA Spoofing Vulnerability

CVE-2022-21919

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-36955

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2022-22047

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2021-40450

Win32k Elevation of Privilege Vulnerability

CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2021-41357

Win32k Elevation of Privilege Vulnerability

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVE-2022-26923

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allowthat to resolve the address instead of it getting done by curl itself, themaximum length that host name can be is 255 bytes. If the host name is...

CVE-2023-36802

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVE-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability

CVE-2024-38063

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2023-21674

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-37969

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2025-21298

Windows OLE Remote Code Execution Vulnerability

CVE-2022-41128

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2023-24880

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2022-41033

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2023-21823

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2022-41073

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-41091

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-41049

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38124

Windows Netlogon Elevation of Privilege Vulnerability

CVE-2022-41125

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2023-38148

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2022-38023

Netlogon RPC Elevation of Privilege Vulnerability

CVE-2023-36563

Microsoft WordPad Information Disclosure Vulnerability

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-35355

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability