6,265 results · Feed
-
High 7.8
Windows Core Messaging Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
-
Medium 6.4
Windows Management Instrumentation Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Shell Spoofing Vulnerability
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Kerberos Remote Code Execution Vulnerability
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
-
High 8.8
Windows Key Distribution Center Remote Code Execution Vulnerability
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
-
Critical 9.8
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
Windows Spaceport.sys Information Disclosure Vulnerability
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
-
High 8.8
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Kerberos Elevation of Privilege Vulnerability
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Windows iSCSI Target Service Denial of Service Vulnerability
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Spaceport.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
Medium 5.6
Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
-
Critical 9.8
RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
-
High 8.0
Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
-
High 7.1
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.7
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
-
High 8.0
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows Group Policy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
-
High 8.4
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
-
High 7.5
Windows DNS Denial of Service Vulnerability
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows Credential Providers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.