Platform
Windows
10,645 known vulnerabilities.
10,645 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle pa…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails…
-
Unscored —CVE-2018-8345 EPSS 15%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
High 8.8
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…
KEV Mar 25, 2022 -
Unscored —
An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscre…
-
Unscored —
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An att…
-
High 7.2
- Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability
Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.
-
Unscored —
On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are created in a folder with incorrect privileges
On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local…
-
Unscored —
On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because it fails to set any permissions on downloaded file objects
On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "Wor…
-
Unscored —CVE-2018-8206 EPSS 12%
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elev…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Serv…
-
Unscored —CVE-2018-8304 EPSS 13%
A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handl…
-
Unscored —
An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Clien…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
High 8.4
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared librari…
-
High 8.4
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to…
-
High 7.4
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to …
-
Unscored —
Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL i…
-
Unscored —
Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a T…
-
Unscored —
Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an …
-
Unscored —
Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows…
-
Unscored —CVE-2018-0982 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —
A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windo…
-
Unscored —
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
Unscored —
An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without considerati…
-
Unscored —
An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly h…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…
-
Unscored —
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Cod…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce pri…
-
Unscored —CVE-2018-8226 EPSS 14%
A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses spec…
-
Unscored —CVE-2018-8208 Public exploit
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…