3,497 results · Feed
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows NTFS Tampering Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
High 8.8
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
-
Medium 4.7
Windows Container Manager Service Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.
-
High 7.5
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.
-
Medium 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.
-
High 7.5
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.
-
High 7.0
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
Medium 6.6
Windows Devices Human Interface Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
Medium 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Performance Counters Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
Low 3.3
Windows Language Experience Service Tampering Vulnerability
Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
Medium 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Projected File System Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows XWizard Framework Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Filter Manager Elevation of Privilege Vulnerability
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability
Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.0
Windows Fast FAT Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Inventory Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
Medium 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.