Platform

Windows

10,645 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

125 results · Clear filters · Feed

Critical 10.0

CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Feb 10, 2022
High 7.8

CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Jan 28, 2022
High 7.8

CVE-2020-0683 Exploited Public exploit

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
KEV Nov 3, 2021
High 7.5

CVE-2020-0674 Exploited Public exploit EPSS 87%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows

Feb 11, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2020-0646 Exploited Public exploit EPSS 99%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows

Jan 14, 2020
KEV Nov 3, 2021
High 8.1

CVE-2020-0601 Exploited Public exploit EPSS 89%

Certificate validation bypass on Windows in crypto/x509

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go

Jan 14, 2020
KEV Nov 3, 2021
High 8.8

CVE-2019-8506 Exploited Public exploit EPSS 16%

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
KEV May 4, 2022
High 7.8

CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Dec 10, 2019
KEV Jan 10, 2022
High 7.5

CVE-2019-1429 Exploited Public exploit EPSS 77%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows

Nov 12, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-1405 Exploited · Ransomware Public exploit EPSS 30%

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Nov 12, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1388 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Nov 12, 2019
KEV Apr 7, 2023
High 7.8

CVE-2019-1322 Exploited · Ransomware Public exploit EPSS 19%

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Oct 10, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1315 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Oct 10, 2019
KEV Mar 15, 2022
High 7.5

CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows

Sep 23, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-1253 Exploited · Ransomware Public exploit EPSS 12%

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Sep 11, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Sep 11, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-1132 Exploited Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Jul 29, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1064 Exploited · Ransomware Public exploit

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install p…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 12, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1069 Exploited · Ransomware Public exploit

Task Scheduler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, a…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 12, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-0863 Exploited Public exploit

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

May 16, 2019
KEV Nov 3, 2021
Critical 9.8

CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

Microsoft Windows Windows Server Windows

May 16, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0859 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0841 Exploited · Ransomware Public exploit EPSS 41%

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0808 Exploited Public exploit EPSS 53%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Apr 9, 2019
KEV Nov 3, 2021
High 8.4

CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV Mar 3, 2025
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
High 7.8

CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
KEV Jan 21, 2022
High 7.8

CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
KEV Mar 28, 2022
High 8.8

CVE-2018-8414 Exploited Public exploit EPSS 73%

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

Microsoft Windows 10 Windows 10 Servers Windows

Aug 15, 2018
KEV Mar 25, 2022
High 7.5

CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

May 9, 2018
KEV Feb 15, 2022
High 7.0

CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows

May 9, 2018
KEV Mar 15, 2022
High 8.8

CVE-2017-8464 Exploited Public exploit EPSS 90%

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

Microsoft Windows Shell Windows

Jun 15, 2017
KEV Feb 10, 2022
Critical 9.8

CVE-2017-8543 Exploited Public exploit EPSS 74%

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

Microsoft Microsoft Windows Windows

Jun 15, 2017
KEV May 24, 2022
High 7.3

CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

Microsoft Windows COM Windows

May 12, 2017
KEV Mar 28, 2022
High 7.8

CVE-2017-0263 Exploited Public exploit EPSS 10%

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

Microsoft Microsoft Windows Windows

May 12, 2017
KEV Feb 10, 2022
High 7.8

CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

Microsoft Windows Windows

Mar 17, 2017
KEV Mar 15, 2022
High 7.5

CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

Microsoft Windows SMB Windows

Mar 17, 2017
KEV May 24, 2022
High 8.1

CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

Microsoft Windows SMB Windows

Mar 17, 2017
KEV Apr 6, 2022
High 8.8

CVE-2017-0143 Exploited · Ransomware Public exploit EPSS 93%

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

Microsoft Windows SMB Windows

Mar 17, 2017
KEV Nov 3, 2021

Windows

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Certificate validation bypass on Windows in crypto/x509

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Windows Elevation of Privilege Vulnerability

Task Scheduler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…