Windows

208 results · Clear filters · Feed

• High 7.8
  CVE-2021-31979 Exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

  Windows Print Spooler Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 2, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-33742 Exploited EPSS 59%

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-33739 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-31955 Exploited Public exploit EPSS 81%

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31199 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31201 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

  Windows Print Spooler Remote Code Execution Vulnerability

  Windows Print Spooler Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-31166 Exploited Public exploit EPSS 100%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
  May 11, 2021

  KEV Apr 6, 2022
• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-17087 Exploited Public exploit

  Windows Kernel Local Elevation of Privilege Vulnerability

  Windows Kernel Local Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Nov 11, 2020

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1464 Exploited EPSS 39%

  Windows Spoofing Vulnerability

  A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secu…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 17, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-1350 Exploited Public exploit EPSS 97%

  A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

  Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021
• Critical 9.0
  CVE-2020-1040 Exploited

  A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inp…

  Microsoft Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0986 Exploited EPSS 16%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jun 9, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2020-1054 Exploited Public exploit EPSS 54%

  Win32k Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 21, 2020

  KEV Nov 3, 2021
• High 7.2
  CVE-2020-5741 Exploited Public exploit EPSS 73%

  Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

  Windows
  May 8, 2020

  KEV Mar 10, 2023
• High 7.8
  CVE-2020-1027 Exploited

  An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV May 23, 2022
• High 8.8
  CVE-2020-1020 Exploited Public exploit EPSS 65%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0968 Exploited · Ransomware EPSS 31%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0938 Exploited EPSS 69%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Feb 10, 2022
• High 7.8
  CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

  An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Jan 28, 2022
• High 7.8
  CVE-2020-0683 Exploited Public exploit

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0674 Exploited Public exploit EPSS 87%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-0646 Exploited Public exploit EPSS 99%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0638 Exploited · Ransomware

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jan 14, 2020

  KEV May 23, 2022
• High 8.1
  CVE-2020-0601 Exploited Public exploit EPSS 89%

  Certificate validation bypass on Windows in crypto/x509

  A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go
  Jan 14, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-8506 Exploited Public exploit EPSS 16%

  A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

  Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
  Dec 18, 2019

  KEV May 4, 2022
• High 7.8
  CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Dec 10, 2019

  KEV Jan 10, 2022
• High 7.5
  CVE-2019-1429 Exploited Public exploit EPSS 77%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows
  Nov 12, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1405 Exploited · Ransomware Public exploit EPSS 30%

  An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1385 Exploited · Ransomware

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1388 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV Apr 7, 2023
• High 7.8
  CVE-2019-1322 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Oct 10, 2019

  KEV Mar 15, 2022