Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,954
- Last 24h
- 1,958
- Critical, 7 days
- 353
- Known exploited
- 1,779
97,437 results · Clear filters · Feed
-
High 7.8
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Sandbox Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Windows Speech Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
-
High 7.3
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Telephony Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft XPS Document Converter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows USB Scanner Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft XPS Document Converter Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows NetBIOS Elevation of Privilege Vulnerability
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows SMB Client Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Input System Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.8
Remote Access API Elevation of Privilege Vulnerability
Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
-
High 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kerberos Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Remote Desktop Client Elevation of Privilege Vulnerability
Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
-
High 7.5
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.