Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,793
- Last 24h
- 342
- Critical, 7 days
- 340
- Known exploited
- 1,779
97,885 results · Clear filters · Feed
-
High 7.0
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
High 7.5
Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
High 7.8
RPC Runtime Elevation of Privilege Vulnerability
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
High 7.5
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Key Distribution Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Application Compatibility Cache Elevation of Privilege Vulnerability
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.