Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.8
Windows SMB Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
Medium 4.6
Windows rndismp6.sys Information Disclosure Vulnerability
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
-
High 7.8
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Bluetooth Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Input System Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
-
Medium 4.2
Windows Hyper-V Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Clipboard User Service Information Disclosure Vulnerability
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
-
Medium 5.5
Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Error Reporting Information Disclosure Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Hyper-V Spoofing Vulnerability
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
-
Medium 5.5
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
-
High 8.8
Microsoft Windows Search Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Management Instrumentation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Bluetooth Service Remote Code Execution Vulnerability
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.