Platform
Windows
10,645 known vulnerabilities.
2,425 results · Clear filters · Feed
-
Medium 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability
Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
-
Medium 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Telephony Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 6.5
ASP.NET Core Security Feature Bypass Vulnerability
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
ASP.NET Core Information Disclosure Vulnerability
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
Medium 6.4
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows NTFS Tampering Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
Medium 4.7
Windows Container Manager Service Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.
-
Medium 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Devices Human Interface Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.
-
Medium 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows DHCP Server Spoofing Vulnerability
Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 5.5
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
-
Medium 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Projected File System Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows State Repository Service Tampering Vulnerability
Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows Deployment Services Information Disclosure Vulnerability
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Print Spooler Components Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Composite Image File System Information Disclosure Vulnerability
Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Print Spooler Components Information Disclosure Vulnerability
Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.