70 results · Clear filters · Feed
-
High 7.0
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerabilit…
-
Unscored —CVE-2020-1362 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka…
-
Unscored —
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…
-
Unscored —CVE-2020-1283 Public exploit
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
High 8.8
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…
KEV Nov 3, 2021 -
Unscored —CVE-2020-1015 Public exploit
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in me…
-
Unscored —CVE-2020-0910 Public exploit
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —CVE-2020-0887 Public exploit
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…
KEV Jan 28, 2022 -
Unscored —CVE-2020-0753 Public exploit
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —CVE-2020-0728 Public exploit
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka '…
-
High 7.8
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…
-
Unscored —CVE-2020-0665 Public exploit
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an …
-
High 8.1
Certificate validation bypass on Windows in crypto/x509
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …
KEV Nov 3, 2021 -
Unscored —CVE-2019-1476 Public exploit
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 10, 2022 -
Unscored —CVE-2019-1422 Public exploit
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a fi…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…
KEV Mar 15, 2022 -
High 7.8
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…
KEV Apr 7, 2023 -
Unscored —CVE-2019-1364 Public exploit
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —CVE-2019-1345 Public exploit
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —CVE-2019-1344 Public exploit
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in mem…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …
KEV Mar 15, 2022 -
High 7.8
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …
KEV Mar 15, 2022 -
High 7.8
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …
KEV Mar 15, 2022 -
High 7.8
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…
KEV Nov 3, 2021 -
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Mar 15, 2022 -
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…