97,017 results · Clear filters · Feed
-
High 7.0
Windows Maps Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows SMB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.
-
High 7.5
Windows iSCSI Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows Task Scheduler Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Autopilot Elevation of Privilege Vulnerability
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft XPS Document Converter Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows IKE Extension Spoofing Vulnerability
Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Client for NFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows Kerberos Elevation of Privilege Vulnerability
Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Windows Image Acquisition Remote Code Execution Vulnerability
Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows NTLM Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
-
High 7.8
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Filter Manager Elevation of Privilege Vulnerability
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 8.6
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.5
Visual Studio Code Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.8
Visual Studio Code Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.2
Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.
-
High 7.3
Aspire Elevation of Privilege Vulnerability
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows SMB Remote Code Execution Vulnerability
Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.
-
High 8.8
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Graphics Kernel Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows CredSSP Remote Code Execution Vulnerability
Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Hyper-V Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Internet Information Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows DNS Elevation of Privilege Vulnerability
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.