Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
High 7.8
Windows Registry Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated att…
-
High 7.8
Windows Media Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vu…
-
High 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. A…
-
Medium 6.7
Local privilege elevation in Composer-Setup for Windows
In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user may modify the existing `C:\ProgramData\ComposerSetup\bin\comp…
-
Unscored —
Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentia…
-
Unscored —
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 a…
-
Unscored —
A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 doe…
-
Unscored —
The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04…
-
Unscored —
Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which…
-
High 8.4
Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerabi…
-
Unscored —CVE-2020-1457 EPSS 12%
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory…
-
Unscored —
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memor…
-
Unscored —
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code ex…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.T…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka …
-
Unscored —
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based),…
-
Unscored —
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary lo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —CVE-2020-1436 EPSS 21%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.F…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles o…
-
Unscored —CVE-2020-1435 EPSS 14%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype fo…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit t…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory…
-
Unscored —
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…
-
Unscored —CVE-2020-1421 EPSS 75%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, a…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitiz…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…