38 results · Clear filters · Feed
-
Medium 6.7CVE-2024-6769 Public exploit
Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medi…
-
Medium 6.8CVE-2024-6768 Public exploit
Denial of Service in CLFS.sys
A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx fu…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —CVE-2019-0552 Public exploit
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —CVE-2019-0570 Public exploit
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Wind…
-
High 8.4
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Mar 3, 2025 -
High 7.8
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
KEV May 24, 2022 -
Unscored —CVE-2018-8584 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
-
Unscored —
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 21, 2022 -
Unscored —
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …
-
Unscored —CVE-2018-8411 Public exploit
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
KEV Mar 28, 2022 -
Unscored —CVE-2018-8449 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…
-
Unscored —CVE-2018-8410 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…
-
Unscored —CVE-2018-0952 Public exploit
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrar…
-
High 8.8
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…
KEV Mar 25, 2022 -
Unscored —CVE-2018-0982 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —CVE-2018-8208 Public exploit
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…
-
Unscored —CVE-2018-8214 Public exploit
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…
-
Unscored —CVE-2018-0959 Public exploit
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
High 7.5
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
KEV Feb 15, 2022 -
Unscored —CVE-2018-8134 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —CVE-2018-0970 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0969 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0974 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0975 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0966 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —CVE-2018-0971 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0972 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0973 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0968 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…