1,116 results · Clear filters · Feed
-
Medium 5.9
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows Kernel Transaction Manager Information Disclosure Vulnerability
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Windows Update Stack Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.
-
Medium 4.9
Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 5.9
Remote Procedure Call Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 6.4
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 6.0
Windows Hyper-V Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.
-
Medium 5.9
HTTP.sys Information Disclosure Vulnerability
Improper access control in Windows HTTP.sys allows an unauthorized attacker to disclose information over a network.
-
Medium 4.7
HTTP.sys Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Kerberos Denial of Service Vulnerability
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.
-
Medium 5.9
Windows Internet Information Services Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
-
Medium 6.6
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.7
Windows Setup and Deployment Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Win32k Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows Kernel Elevation of Privilege Vulnerability
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Windows Internet Information Services Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
-
Medium 4.9CVE-2026-119905 Public exploit
Windows DNS Spoofing Vulnerability
Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.
-
Medium 5.3
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.
-
Medium 6.5
Windows Installer Information Disclosure Vulnerability
Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 5.3
Windows Remote Desktop Services Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.
-
Medium 4.0
Windows Storport Miniport Driver Information Disclosure Vulnerability
Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.
-
Medium 6.4
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability
Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.
-
Medium 6.4
Windows Failover Cluster Elevation of Privilege Vulnerability
Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Installer Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
-
Medium 5.5
Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
-
Medium 6.7
Windows Installer Elevation of Privilege Vulnerability
Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Message Queuing Denial of Service Vulnerability
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.
-
Medium 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
Medium 4.7
Windows Graphics Kernel Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
Medium 4.7
Windows Management Services Information Disclosure Vulnerability
Use after free in Windows Management Services allows an authorized attacker to disclose information locally.