Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 7.8
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Office Word Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
Medium 5.5
Windows NTFS Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
-
High 7.1
Windows Enterprise App Management Elevation of Privilege Vulnerability
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
Medium 5.6
Windows Secure Kernel Mode Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
-
High 7.5
Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
-
Medium 6.8
Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Modern Device Management (MDM) Tampering Vulnerability
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows NTFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
-
Medium 5.5
Windows Projected File System Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows USB Print Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
-
Critical 9.8
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Audio Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Push Notifications Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Resume Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Windows Overlay Filter Tampering Vulnerability
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Network List Service Tampering Vulnerability
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Sysmain Service Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Internal System User Profile Elevation of Privilege Vulnerability
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.