Vendor
Microsoft
14,257 known vulnerabilities.
Products
8,209 results · Clear filters · Feed
-
High 7.0
WebDAV Elevation of Privilege Vulnerability
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
-
High 8.2
Windows Hyper-V Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Phone Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Management Instrumentation Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Performance Monitor Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Graphics Component Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Projected File System Elevation of Privilege Vulnerability
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
-
High 7.5
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows EAPHost Service Elevation of Privilege Vulnerability
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.