Advisories · Technology
Microsoft Windows.
Every CVE that names Microsoft Windows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEVKEV
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Storage Service improperly…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hy…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass vulnerability exists in Windows Defender Application Control…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerabi…
- Microsoft Visual Studio
- Microsoft Windows
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Use after free in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Memory corruption
-
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vu…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the IOleCvt interface renders ASP…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the VBScript engine handles…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Terminal Services component…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when Windows Task Scheduler improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server