Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 7.5
Windows DNS Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
-
High 7.0
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows Bluetooth Port Driver Remote Code Execution
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.0
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows DNS Remote Code Execution Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
-
Critical 9.8
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Graphics Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Rich Text Edit Control Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.6
Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
-
Medium 5.5
Role: DNS Server Tampering Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.
-
High 7.5
Windows DNS Denial of Service Vulnerability
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
-
High 8.1
Windows libarchive Remote Code Execution Vulnerability
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
Windows Netlogon Information Disclosure Vulnerability
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows DNS Denial of Service Vulnerability
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows Kerberos Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.