Windows

125 results · Clear filters · Feed

• High 8.4
  CVE-2023-29360 Exploited Public exploit EPSS 22%

  Microsoft Streaming Service Elevation of Privilege Vulnerability

  Microsoft Streaming Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 13, 2023

  KEV Feb 29, 2024
• High 7.8
  CVE-2023-29336 Exploited Public exploit EPSS 41%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  May 9, 2023

  KEV May 9, 2023
• High 7.8
  CVE-2023-28252 Exploited · Ransomware Public exploit EPSS 49%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023

  KEV Apr 11, 2023
• High 7.0
  CVE-2023-28229 Exploited Public exploit

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023

  KEV Oct 4, 2023
• High 7.8
  CVE-2023-21823 Exploited Public exploit

  Windows Graphics Component Remote Code Execution Vulnerability

  Windows Graphics Component Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android iOS
  Feb 14, 2023

  KEV Feb 14, 2023
• High 8.8
  CVE-2023-21674 Exploited Public exploit EPSS 34%

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 10, 2023

  KEV Jan 10, 2023
• High 7.8
  CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 13, 2022

  KEV Sep 14, 2022
• High 7.8
  CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 1, 2022

  KEV Jun 14, 2022
• High 8.8
  CVE-2022-26923 Exploited Public exploit EPSS 84%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022

  KEV Aug 18, 2022
• High 7.0
  CVE-2022-26904 Exploited Public exploit EPSS 17%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 25, 2022
• High 7.8
  CVE-2022-24521 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 13, 2022
• High 7.8
  CVE-2022-22718 Exploited Public exploit EPSS 18%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Apr 19, 2022
• High 7.8
  CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Mar 25, 2022
• High 7.8
  CVE-2022-21971 Exploited Public exploit EPSS 54%

  Windows Runtime Remote Code Execution Vulnerability

  Windows Runtime Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Aug 18, 2022
• High 7.0
  CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jan 11, 2022

  KEV Feb 4, 2022
• High 7.8
  CVE-2021-43226 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021

  KEV Oct 6, 2025
• High 7.5
  CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.8
  CVE-2021-40449 Exploited · Ransomware Public exploit EPSS 82%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2021

  KEV Nov 17, 2021
• High 8.8
  CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

  Microsoft MSHTML Remote Code Execution Vulnerability

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-34486 Exploited Public exploit

  Windows Event Tracing Elevation of Privilege Vulnerability

  Windows Event Tracing Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 28, 2022
• High 7.8
  CVE-2021-36934 Exploited Public exploit EPSS 67%

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

  Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows
  Jul 22, 2021

  KEV Feb 10, 2022
• High 8.8
  CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 2, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-33739 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-31955 Exploited Public exploit EPSS 81%

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

  Windows Print Spooler Remote Code Execution Vulnerability

  Windows Print Spooler Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-31166 Exploited Public exploit EPSS 100%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
  May 11, 2021

  KEV Apr 6, 2022
• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-17087 Exploited Public exploit

  Windows Kernel Local Elevation of Privilege Vulnerability

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2020-1054 Exploited Public exploit EPSS 54%

  Win32k Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 21, 2020

  KEV Nov 3, 2021
• High 7.2
  CVE-2020-5741 Exploited Public exploit EPSS 73%

  Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

  Windows
  May 8, 2020

  KEV Mar 10, 2023
• High 8.8
  CVE-2020-1020 Exploited Public exploit EPSS 65%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021