3,497 results · Feed
-
High 7.8
Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
-
High 7.8
RPC Runtime Elevation of Privilege Vulnerability
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Update Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Key Distribution Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows SmartScreen Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
-
Medium 6.1
Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
-
Medium 5.5
Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
-
High 7.0
Windows Application Compatibility Cache Elevation of Privilege Vulnerability
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows iSCSI Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows iSCSI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.