Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …
KEV Mar 15, 2022 -
Unscored —
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle …
-
Unscored —
An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the op…
-
Unscored —
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Con…
-
Unscored —
A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Sp…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
High 7.5CVE-2019-1308 EPSS 10%
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1335, CVE-2…
-
Unscored —
A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and fold…
-
Unscored —
An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails…
-
High 7.5CVE-2019-1307 EPSS 10%
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2…
-
Unscored —CVE-2019-1311 EPSS 36%
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Wi…
-
Unscored —CVE-2019-1060 EPSS 14%
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
Unscored —CVE-2019-1166 EPSS 68%
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass …
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of S…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, …
-
High 7.8
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …
KEV Mar 15, 2022 -
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Nov 3, 2021 -
Unscored —
A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Deni…
-
High 7.8
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabiliti…
-
Low 3.3
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabiliti…
-
High 7.8
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabiliti…
-
Medium 6.5
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password t…
-
Unscored —
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables lo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objec…
-
Unscored —CVE-2019-1291 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2…
-
Unscored —
An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to prope…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2…
-
Unscored —
A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka '…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …
-
Unscored —CVE-2019-1290 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in mem…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce …
-
Unscored —
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, …
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation …
-
Unscored —
An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of…
-
Unscored —
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevatio…
-
Unscored —
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sa…