Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,792
- Last 24h
- 347
- Critical, 7 days
- 344
- Known exploited
- 1,779
97,885 results · Clear filters · Feed
-
High 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Fax and Scan Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Storage Spaces Controller Denial of Service Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 8.8
.NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Bluetooth Port Driver Remote Code Execution
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
-
High 7.0
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
-
High 8.8
Windows Shell Remote Code Execution Vulnerability
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Management Services Elevation of Privilege Vulnerability
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Account Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 8.1
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
-
High 8.0
Microsoft Power Apps Remote Code Execution Vulnerability
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
-
High 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft PowerShell Security Feature Bypass Vulnerability
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 8.8
WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Spaceport.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.