266 results · Clear filters · Feed
-
Unscored —
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 21, 2022 -
Unscored —
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …
-
Unscored —CVE-2018-8411 Public exploit
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
KEV Mar 28, 2022 -
Unscored —CVE-2018-8449 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…
-
Unscored —CVE-2018-8410 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…
-
Unscored —CVE-2018-0952 Public exploit
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrar…
-
Unscored —CVE-2018-0982 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —CVE-2018-8208 Public exploit
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…
-
Unscored —CVE-2018-8214 Public exploit
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…
-
Unscored —CVE-2018-0959 Public exploit
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
High 7.5
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
KEV Feb 15, 2022 -
Unscored —CVE-2018-8134 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —CVE-2018-0970 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0969 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0974 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0975 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0966 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —CVE-2018-0971 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0972 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0973 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0968 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Medium 5.5
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…
KEV Jan 10, 2022