Platform

Windows

10,646 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

174 results · Clear filters · Feed

High 7.8

CVE-2022-24521 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
KEV Apr 13, 2022
High 7.8

CVE-2022-22718 Exploited Public exploit EPSS 18%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Apr 19, 2022
High 7.8

CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Mar 25, 2022
High 7.8

CVE-2022-21971 Exploited Public exploit EPSS 54%

Windows Runtime Remote Code Execution Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Aug 18, 2022
High 7.0

CVE-2022-21919 Exploited

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Apr 25, 2022
High 7.0

CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
KEV Feb 4, 2022
High 7.8

CVE-2021-43226 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
KEV Oct 6, 2025
High 7.5

CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
High 7.5

CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
High 7.8

CVE-2021-41357 Exploited

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2022 Windows 11 version 21H2 Windows 10 Version 20H2 Windows

Oct 13, 2021
KEV Apr 25, 2022
High 7.8

CVE-2021-40450 Exploited

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 13, 2021
KEV Apr 25, 2022
High 7.8

CVE-2021-40449 Exploited · Ransomware Public exploit EPSS 82%

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 13, 2021
KEV Nov 17, 2021
High 8.8

CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 15, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-36955 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 15, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-36948 Exploited EPSS 23%

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 12, 2021
KEV Nov 3, 2021
High 7.5

CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

Windows LSA Spoofing Vulnerability

Windows LSA Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows

Aug 12, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-34486 Exploited Public exploit

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 12, 2021
KEV Mar 28, 2022
High 7.8

CVE-2021-34484 Exploited EPSS 22%

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 12, 2021
KEV Mar 31, 2022
High 7.8

CVE-2021-36934 Exploited Public exploit EPSS 67%

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbit…

Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows

Jul 22, 2021
KEV Feb 10, 2022
High 7.8

CVE-2021-33771 Exploited EPSS 10%

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-31979 Exploited

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 14, 2021
KEV Nov 3, 2021
High 8.8

CVE-2021-34527 Exploited · Ransomware Public exploit EPSS 100%

Windows Print Spooler Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 2, 2021
KEV Nov 3, 2021
High 7.5

CVE-2021-33742 Exploited EPSS 59%

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 8.4

CVE-2021-33739 Exploited Public exploit

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-31956 Exploited Public exploit EPSS 22%

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-28310 Exploited Public exploit

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 25, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-1647 Exploited Public exploit EPSS 40%

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows

Jan 12, 2021
KEV Nov 3, 2021
High 7.8

CVE-2020-17087 Exploited Public exploit

Windows Kernel Local Elevation of Privilege Vulnerability

Windows Kernel Local Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 11, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-1464 Exploited EPSS 39%

Windows Spoofing Vulnerability

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secu…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 17, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-1147 Exploited Public exploit EPSS 96%

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet

Jul 14, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-0986 Exploited EPSS 16%

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jun 9, 2020
KEV Nov 3, 2021
High 7.0

CVE-2020-1054 Exploited Public exploit EPSS 54%

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 21, 2020
KEV Nov 3, 2021
High 7.2

CVE-2020-5741 Exploited Public exploit EPSS 73%

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

Windows

May 8, 2020
KEV Mar 10, 2023
High 7.8

CVE-2020-1027 Exploited

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Apr 15, 2020
KEV May 23, 2022
High 8.8

CVE-2020-1020 Exploited Public exploit EPSS 65%

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Apr 15, 2020
KEV Nov 3, 2021
High 7.5

CVE-2020-0968 Exploited · Ransomware EPSS 31%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Windows

Apr 15, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-0938 Exploited EPSS 69%

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Apr 15, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Jan 28, 2022

Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft MSHTML Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows LSA Spoofing Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Windows Kernel Local Elevation of Privilege Vulnerability

Windows Spoofing Vulnerability

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Win32k Elevation of Privilege Vulnerability

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…