Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 7.8CVE-2026-97799 Public exploit
Windows Audio Service Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8CVE-2026-97798 Public exploit
Windows Error Reporting Service Elevation of Privilege Vulnerability
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
.NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthent…
-
Medium 6.4
HID Class Driver Elevation of Privilege Vulnerability
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
High 8.1
Windows Schannel Remote Code Execution Vulnerability
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
-
High 7.8
HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
High 7.5
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft QUIC Security Feature Bypass Vulnerability
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Windows Text Shaping Remote Code Execution Vulnerability
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
High 8.8
WebDAV Elevation of Privilege Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Dynamics Business Central Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
-
High 8.8
.NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Partition Management Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Role: DNS Server Tampering Vulnerability
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows VHD miniport driver Elevation of Privilege Vulnerability
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
-
Medium 4.4
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Microsoft Windows Codecs Library Denial of Service Vulnerability
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.