Windows

208 results · Clear filters · Feed

• High 7.8
  CVE-2019-1315 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Oct 10, 2019

  KEV Mar 15, 2022
• High 7.5
  CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows
  Sep 23, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1253 Exploited · Ransomware Public exploit EPSS 12%

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1214 Exploited

  An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1132 Exploited Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Jul 29, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1130 Exploited · Ransomware

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 29, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1129 Exploited · Ransomware

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 29, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-0880 Exploited

  A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 15, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1064 Exploited · Ransomware Public exploit

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install p…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 12, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1069 Exploited · Ransomware Public exploit

  Task Scheduler Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 12, 2019

  KEV Mar 15, 2022
• High 8.8
  CVE-2019-0903 Exploited EPSS 22%

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Mar 25, 2022
• High 7.8
  CVE-2019-0863 Exploited Public exploit

  An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

  Microsoft Windows Windows Server Windows
  May 16, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-3568 Exploited EPSS 30%

  A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RT…

  Facebook WhatsApp for Android WhatsApp Business for Android WhatsApp for iOS Windows Android iOS
  May 14, 2019

  KEV Apr 19, 2022
• High 7.8
  CVE-2019-0859 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0841 Exploited · Ransomware Public exploit EPSS 41%

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0797 Exploited

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0808 Exploited Public exploit EPSS 53%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2019-0703 Exploited

  An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Wi…

  Microsoft Windows Windows Server Windows
  Apr 8, 2019

  KEV May 23, 2022
• High 8.4
  CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
  Dec 12, 2018

  KEV Mar 3, 2025
• High 7.8
  CVE-2018-8611 Exploited Public exploit

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

  Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
  Dec 12, 2018

  KEV May 24, 2022
• High 7.8
  CVE-2018-8589 Exploited

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k…

  Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows
  Nov 14, 2018

  KEV May 23, 2022
• High 7.8
  CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
  Oct 10, 2018

  KEV Jan 21, 2022
• High 7.8
  CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

  Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
  Sep 13, 2018

  KEV Mar 28, 2022
• High 7.8
  CVE-2018-8406 Exploited · Ransomware

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

  Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows
  Aug 15, 2018

  KEV Mar 28, 2022
• High 7.8
  CVE-2018-8405 Exploited · Ransomware

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

  Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows
  Aug 15, 2018

  KEV Mar 28, 2022
• High 8.8
  CVE-2018-8414 Exploited Public exploit EPSS 73%

  A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

  Microsoft Windows 10 Windows 10 Servers Windows
  Aug 15, 2018

  KEV Mar 25, 2022
• High 7.5
  CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

  Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
  May 9, 2018

  KEV Feb 15, 2022
• High 7.0
  CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows
  May 9, 2018

  KEV Mar 15, 2022
• High 8.8
  CVE-2017-5070 Exploited EPSS 32%

  Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Oct 27, 2017

  KEV Jun 8, 2022
• High 8.8
  CVE-2017-8464 Exploited Public exploit EPSS 90%

  Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

  Microsoft Windows Shell Windows
  Jun 15, 2017

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2017-8543 Exploited Public exploit EPSS 74%

  Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

  Microsoft Microsoft Windows Windows
  Jun 15, 2017

  KEV May 24, 2022
• High 7.3
  CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

  Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

  Microsoft Windows COM Windows
  May 12, 2017

  KEV Mar 28, 2022
• High 7.8
  CVE-2017-0263 Exploited Public exploit EPSS 10%

  The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

  Microsoft Microsoft Windows Windows
  May 12, 2017

  KEV Feb 10, 2022
• High 8.8
  CVE-2017-5030 Exploited EPSS 41%

  Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

  chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
  Apr 24, 2017

  KEV Jun 8, 2022
• High 7.8
  CVE-2017-0001 Exploited

  The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

  Microsoft Windows GDI+ Windows
  Mar 17, 2017

  KEV Mar 3, 2022
• High 7.8
  CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

  The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

  Microsoft Windows Windows
  Mar 17, 2017

  KEV Mar 15, 2022
• High 7.5
  CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

  Microsoft Windows SMB Windows
  Mar 17, 2017

  KEV May 24, 2022