Platform
Windows
10,646 known vulnerabilities.
10,646 results · Feed
-
Medium 5.5
Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 7.0
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
-
High 7.8
UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
-
High 8.8
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
-
High 7.2
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Defender Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
-
High 7.5
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows Event Tracing Spoofing Vulnerability
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
-
High 8.1
Microsoft Windows PDF Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Security App Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before r…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before includin…
-
Medium 6.1
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in s…
-
Critical 9.6
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before …
-
Critical 9.6
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the…
-
Medium 6.1
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering…
-
Medium 6.1
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CS…
-
Critical 9.6
Affected devices do not properly restrict executable content contained in imported trace files. This could allow an att…
-
Medium 5.9
NetEase Cloud Music Weak Encryption via eapi/xeapi
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are decrypted using a fixed, publicly documented AES-128-ECB key with no integrity …
-
High 7.4
NetEase Cloud Music TLS Certificate Validation Bypass
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server cert…
-
High 8.1
NetEase Cloud Music RCE via os.navigateExternal IPC
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validat…
-
Medium 6.1
DB2 Recovery Expert for Linux, UNIX and Windows Cross-Site Scripting
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea…