Vendor
Microsoft
14,257 known vulnerabilities.
Products
8,209 results · Clear filters · Feed
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Shell Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
-
High 7.0
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
-
High 8.8
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
-
High 8.0
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Event Logging Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
-
High 8.4
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
-
High 8.0
Windows Enterprise App Management Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Devices Human Interface Elevation of Privilege Vulnerability
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
-
High 8.8
Windows NTFS Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
-
High 7.1CVE-2026-69451 Public exploit
Windows Management Instrumentation Elevation of Privilege Vulnerability
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Volume Manager Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
-
High 7.8
Windows State Repository Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows DHCP Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.