Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
WebDAV Information Disclosure Vulnerability
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
-
High 7.8
WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Modern Device Management (MDM) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
-
High 7.5
Windows SMB Server Denial of Service Vulnerability
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Device Association Service Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
High 7.8
WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Remote Desktop Display Driver Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
-
High 8.0
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
-
Critical 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Update Elevation of Privilege Vulnerability
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Microsoft PowerShell Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
RPC Endpoint Mapper Service Denial of Service Vulnerability
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
-
Critical 9.1
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
High 7.8
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
High 7.8
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
High 7.5
.NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows WalletService Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
-
High 8.8
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
-
High 7.5
.NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
.NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
.NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 8.8CVE-2026-96230 Public exploit
ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.8
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.