Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.0
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
-
High 7.8CVE-2026-69328 Public exploit
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
-
High 7.5
BranchCache Denial of Service Vulnerability
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Performance Monitor Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
-
High 8.0
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows USB Video Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
Medium 5.7
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows License Manager Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
-
Medium 5.5
Push Message Routing Service Information Disclosure Vulnerability
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
-
High 7.1
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows Power Dependency Coordinator Tampering Vulnerability
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft COM for Windows Information Disclosure Vulnerability
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows DHCP Server Information Disclosure Vulnerability
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
-
High 7.8
Windows USB Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft COM for Windows Elevation of Privilege Vulnerability
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
-
High 7.0
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
-
High 7.8
Windows DCOM Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
-
High 7.1
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Standard XPS Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Internet Storage Name Service Information Disclosure Vulnerability
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
-
High 8.8
Windows DHCP Server Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
High 8.0
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows GDI+ Information Disclosure Vulnerability
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
-
High 7.1
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
-
High 7.1
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
-
Medium 4.7
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.