5,368 results · Feed
-
Medium 6.5
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.
-
Medium 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
Medium 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows DHCP Server Spoofing Vulnerability
Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.
-
High 7.5
Windows Performance Counters Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.
-
Medium 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows XWizard Framework Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Filter Manager Elevation of Privilege Vulnerability
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability
Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.0
Windows Device Inventory Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
Medium 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows JScript Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.
-
Medium 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows State Repository Service Tampering Vulnerability
Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Deployment Services Information Disclosure Vulnerability
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability
Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.
-
High 7.1
Windows Kernel Security Feature Bypass Vulnerability
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.
-
Medium 5.5
Microsoft Account Tampering Vulnerability
Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.
-
High 7.5
Windows SMBv3 Server Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.
-
Medium 6.6
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.
-
High 7.0
Windows COM Elevation of Privilege Vulnerability
Use after free in Windows COM allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Security Account Manager Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.
-
Medium 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.