2,629 results · Clear filters · Feed
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Task Scheduler Elevation of Privilege Vulnerability
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system…
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.5
Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
-
High 7.5
Windows Server Update Service Elevation of Privilege Vulnerability
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows NDIS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could …
-
High 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Text Shaping Remote Code Execution Vulnerability
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
High 8.8
WebDAV Elevation of Privilege Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Partition Management Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows VHD miniport driver Elevation of Privilege Vulnerability
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
-
High 8.8
RPC Runtime Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Network File System Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Media Video Decoder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
-
High 8.1
Remote Desktop Gateway Service Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.