Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Graphics Component Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
Medium 6.8
Network Device Enrollment Service (NDES) Spoofing Vulnerability
Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
-
High 7.8
Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Print Spooler Components Information Disclosure Vulnerability
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Projected File System Elevation of Privilege Vulnerability
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows EAPHost Service Elevation of Privilege Vulnerability
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Remote Desktop Gateway Service Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
-
Critical 9.8
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows SMB Client Security Feature Bypass Vulnerability
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Projected File System Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows GDI Remote Code Execution Vulnerability
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Registry Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Group Policy Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
-
Medium 6.6
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
-
High 7.0
Windows Search Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
High 7.0
Windows ALPC Elevation of Privilege Vulnerability
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Search Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.