Advisories · Technology
Microsoft Windows.
Every CVE that names Microsoft Windows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Protection mechanism failure in Microsoft Windows
- Microsoft Windows
- CWE-420
- CWE-693
- CVSS 7.4 High
Microsoft Windows: The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the…
- Microsoft Windows
- CWE-184
- CWE-820
- CVSS 7.0 HighCritical · CVSS 7+ and EPSS
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
- Microsoft Windows
- CWE-451
- CVSS 5.0 Medium
NULL pointer dereference in Microsoft Windows
- Microsoft Windows
- Memory corruption
- CVSS 5.0 Medium
NULL pointer dereference in Microsoft Windows
- Microsoft Windows
- Memory corruption
-
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the SharedStream Library…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of P…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vul…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
- Microsoft Windows 10 Version 2004 for x64-based Systems
-
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability,…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could ga…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the vic…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnosti…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows Server, version 2004 (Server Core installation)
- Microsoft Windows 10 Version 2004 for 32-bit Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
- Microsoft Windows 10 Version 2004 for x64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
- Microsoft Windows 10 Version 2004 for 32-bit Systems
-
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for x64-based Systems
-
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim open…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Pri…
- Microsoft Windows 10 Version 2004 for x64-based Systems
- Microsoft Windows Server, version 2004 (Server Core installation)
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on th…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands w…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerab…
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
- Microsoft Windows Server, version 2004 (Server Core installation)
-
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitr…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Informat…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevatio…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the vi…
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems
-
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 2004 for 32-bit Systems
- Microsoft Windows 10 Version 2004 for ARM64-based Systems