Platform

Windows

10,646 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,646 results · Feed

High 7.0

CVE-2024-20657

Windows Group Policy Elevation of Privilege Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
High 8.8

CVE-2024-20674 Public exploit EPSS 17%

Windows Kerberos Security Feature Bypass Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 6.6

CVE-2024-20666 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Unscored —

CVE-2023-51654

Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions…

BROTHER INDUSTRIES iPrint&Scan Desktop for Windows Windows

Dec 26, 2023
High 7.5

CVE-2023-5594

Improper following of a certificate's chain of trust in ESET security products

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted.

ESET spol. s.r.o. ESET Internet Security ESET NOD32 Antivirus ESET Smart Security Premium Linux Windows

Dec 21, 2023
Medium 6.5

CVE-2022-44684

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Dec 20, 2023
High 7.3

CVE-2023-43586

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an …

Zoom Video Communications Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 Windows

Dec 13, 2023
High 7.5

CVE-2023-35622

Windows DNS Spoofing Vulnerability

Windows DNS Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Dec 12, 2023
Medium 5.5

CVE-2023-35635

Windows Kernel Denial of Service Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 22H3 Windows

Dec 12, 2023
High 7.8

CVE-2023-35633

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 Windows

Dec 12, 2023
High 8.0

CVE-2023-35634

Windows Bluetooth Driver Remote Code Execution Vulnerability

Windows Bluetooth Driver Remote Code Execution Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows 11 version 21H2 Windows

Dec 12, 2023
High 7.8

CVE-2023-35632

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.8

CVE-2023-35631

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Dec 12, 2023
High 8.8

CVE-2023-35630

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 6.8

CVE-2023-35629

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 Windows

Dec 12, 2023
High 7.8

CVE-2023-35644

Windows Sysmain Service Elevation of Privilege Vulnerability

Windows Sysmain Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 8.1

CVE-2023-35628 EPSS 93%

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.5

CVE-2023-35643

DHCP Server Service Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Dec 12, 2023
Medium 6.5

CVE-2023-35642

Internet Connection Sharing (ICS) Denial of Service Vulnerability

Internet Connection Sharing (ICS) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 8.8

CVE-2023-35641

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.5

CVE-2023-35638

DHCP Server Service Denial of Service Vulnerability

DHCP Server Service Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Dec 12, 2023
High 8.8

CVE-2023-35639

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.5

CVE-2023-36005 EPSS 24%

Windows Telephony Server Elevation of Privilege Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 8.8

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 6.7

CVE-2023-36003 Public exploit

XAML Diagnostics Elevation of Privilege Vulnerability

XAML Diagnostics Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.5

CVE-2023-36004

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 5.3

CVE-2023-36012

DHCP Server Service Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Dec 12, 2023
High 7.8

CVE-2023-21740

Windows Media Remote Code Execution Vulnerability

Windows Media Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.8

CVE-2023-36011

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.8

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Microsoft Windows 11 version 23H2 Windows 11 version 22H3 Windows

Dec 12, 2023
High 7.8

CVE-2023-36696

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
High 7.3

CVE-2023-49580

Information disclosure in SAP GUI for Windows and SAP GUI for Java

SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allow…

SAP SAP GUI for Windows and SAP GUI for Java Windows

Dec 12, 2023
Medium 5.3

CVE-2023-29258

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
Medium 5.3

CVE-2023-40687

IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
Medium 5.3

CVE-2023-38727

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
Medium 6.5

CVE-2023-47701

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
High 7.2

CVE-2023-38003

IBM Db2 command execution

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
Medium 5.9

CVE-2023-46167

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 4, 2023
Medium 5.9

CVE-2023-40692

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 3, 2023
Medium 6.5

CVE-2023-45178

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 3, 2023