Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
WebDAV Elevation of Privilege Vulnerability
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
High 8.0
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows SMB Server Elevation of Privilege Vulnerability
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
-
High 7.8
WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Host Guardian Service Elevation of Privilege Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Resource Management (MRM) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8CVE-2026-85884 Public exploit
Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Remote Access Service Infrastructure Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Host Guardian Service Tampering Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
-
High 7.8
Winlogon Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.4
Windows Hyper-V Security Feature Bypass Vulnerability
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
-
High 7.8
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
-
High 7.0
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
-
Medium 5.5
Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
-
High 8.8
Windows GDI+ Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.