Platform
Windows
10,646 known vulnerabilities.
5,852 results · Clear filters · Feed
-
High 8.0
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
-
High 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
-
High 8.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
-
High 7.2
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
-
High 8.1
Microsoft Windows PDF Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Security App Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
-
High 7.4
NetEase Cloud Music TLS Certificate Validation Bypass
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server cert…
-
High 8.1
NetEase Cloud Music RCE via os.navigateExternal IPC
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validat…
-
High 7.3
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers…
-
High 7.5
OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override
OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS variables. Attackers with gateway or agent access can supply these variable…
-
High 8.8
OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set
OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-executable rules and abusable system binaries like mshta, rundll32, and certutil. Remote callers can add broad allow rules …
-
High 8.8
OpenClaw Windows Node before 2026.7.1 Authorization Bypass
OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fails to split commands on pipe operators or extract command substitutions. Connected gateways or agent…
-
High 7.5
Uncontrolled Memory Allocation in CODESYS Gateway Client
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory cons…
-
High 8.4
CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution.
-
High 7.8
virtio-win: Integer overflow causing a heap overflow in Viosock driver
virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT request with attacker-controlled VIRTIO_VSOCK_SELECT.Fdss[*].fd_count values that …
-
High 8.2
Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A l…
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an U…
-
High 7.4
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnera…
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabili…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabili…
-
High 7.5
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Re…
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability.…
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerabilit…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulner…
-
High 7.2
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. …
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elemen…
-
High 8.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Functi…
-
High 7.8
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. …
-
High 7.3
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Sele…
-
High 8.8
Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows
CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through t…
-
High 8.2
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.