3,520 results · Clear filters · Feed
-
High 7.8
Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
-
High 8.0
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
-
High 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
-
High 7.8
Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
-
High 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows Error Reporting Tampering Vulnerability
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows DHCP Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
High 7.5
Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.