Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operatio…
-
Unscored —
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this v…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this v…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this v…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.…
-
Unscored —
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevatio…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft…
-
Unscored —
A denial of service issue was addressed with improved input validation.
-
Unscored —
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, mac…
-
Unscored —
A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, ma…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1…
-
Unscored —CVE-2019-3999 Public exploit
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, …
-
Medium 6.7
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privi…
-
High 8.4
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a bu…
-
Medium 6.5
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated att…
-
Medium 6.5
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a…
-
High 7.5
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauth…
-
Unscored —
Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authentic…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
High 7.5CVE-2020-0767 EPSS 18%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…
-
Unscored —
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —CVE-2020-0753 Public exploit
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…