Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
Unscored —CVE-2019-1280 EPSS 19%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle s…
-
Unscored —
An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to …
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'W…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, a…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows H…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …
KEV Mar 15, 2022 -
Unscored —CVE-2019-1248 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —CVE-2019-1252 EPSS 60%
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —CVE-2019-1246 EPSS 13%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-1250 EPSS 18%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with lo…
-
Unscored —CVE-2019-1247 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-1249 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of re…
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersona…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2…
-
Unscored —CVE-2019-1240 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
High 7.8
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…
KEV Nov 3, 2021 -
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informat…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2…
-
Unscored —CVE-2019-1241 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —CVE-2019-1242 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
High 7.8CVE-2019-1214 Exploited
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does…
-
Unscored —CVE-2019-1243 EPSS 18%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memor…
-
Unscored —CVE-2019-0788 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —CVE-2019-0787 EPSS 12%
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …