Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.
-
High 7.0CVE-2025-60719 Public exploit
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 7.8
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
KEV Apr 13, 2026 -
Medium 6.5
Storvsp.sys Driver Denial of Service Vulnerability
Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.
-
High 7.8CVE-2025-60709 Public exploit
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Hyper-V Information Disclosure Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
-
High 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Client-Side Caching Elevation of Privilege Vulnerability
Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
-
High 7.8
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.
-
High 7.8
Windows WLAN Service Elevation of Privilege Vulnerability
External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service locally.
-
Medium 5.5
Windows Speech Recognition Information Disclosure Vulnerability
Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Speech Recognition Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Speech Runtime Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.
-
High 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Smart Card Reader Elevation of Privilege Vulnerability
Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
High 8.2
Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: De…
-
High 7.4
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Dev…
-
High 7.4
Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 …
-
High 7.4
Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: De…
-
Medium 6.6
Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow…
-
Low 3.3
Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications…
-
Medium 5.6
Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may al…
-
High 8.2
Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: De…
-
High 7.8
Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may a…
-
Medium 6.5
Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applicat…
-
Medium 5.5
Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications …
-
Medium 6.5
Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow…
-
Medium 5.6
Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring…
-
Low 3.8
Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before v…
-
Medium 6.7
Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Dev…
-
Medium 5.5
Information Disclosure vulnerability in SAP GUI for Windows
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availabil…
-
Medium 6.7
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path. A us…
-
Medium 6.8
Denial-of-service vulnerability in ESET security products for Windows
Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration.
-
High 7.3
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator…
-
High 7.8
The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecure…