Advisories · Technology
Microsoft Windows.
Every CVE that names Microsoft Windows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 HighCritical · KEVKEV
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Function…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Function…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Function…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that Windows handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Windows Common Log File System…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Common Log File System…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Se…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows User Profile Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Microsoft Windows implements…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Graphics…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Media Service that allows file…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Windows Common Log File System…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows 10 Version 1903 for ARM64-based Systems
- Path traversal
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Common Log File System…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Microsoft Windows Graphics…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass vulnerability exists in Windows 10 when third party filters are…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Hyper-V Denial o…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles hard links…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the Windows Common Log File System…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on th…
- Microsoft Windows 10 Version 1909 for ARM64-based Systems
- Microsoft Windows Server, version 1909 (Server Core installation)
-
Microsoft Windows: An information disclosure vulnerability exists in Windows Media Player when it fails to…
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists in Windows Media Player when it fails to…
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles COM object…
- Microsoft Windows
- Microsoft Windows Server