Windows
by Microsoft
CVEs (2,699)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2009-2529 | Hig | 0.54 | 8.1 | 0.20 | Oct 14, 2009 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability." | ||
| CVE-2009-2502 | Hig | 0.54 | 8.1 | 0.22 | Oct 14, 2009 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003… | ||
| CVE-2026-85921 | Hig | 0.53 | 8.2 | 0.00 | Sep 14, 2026 | Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83939 | Hig | 0.53 | 8.2 | 0.00 | Sep 8, 2026 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69906 | Hig | 0.53 | 8.2 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69874 | Hig | 0.53 | 8.2 | 0.00 | Sep 8, 2026 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69846 | Hig | 0.53 | 8.2 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-43625 | Hig | 0.53 | 8.1 | 0.01 | Nov 12, 2024 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | ||
| CVE-2024-29995 | Hig | 0.53 | 8.1 | 0.01 | Aug 13, 2024 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2024-20697 | Hig | 0.53 | 7.3 | 0.72 | Jan 9, 2024 | Windows libarchive Remote Code Execution Vulnerability | ||
| CVE-2022-41091 | Med | 0.53 | 5.4 | 0.02 | KEV | Nov 9, 2022 | Windows Mark of the Web Security Feature Bypass Vulnerability | |
| CVE-2022-33679 | Hig | 0.53 | 8.1 | 0.11 | Sep 13, 2022 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2022-33647 | Hig | 0.53 | 8.1 | 0.02 | Sep 13, 2022 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2022-24545 | Hig | 0.53 | 8.1 | 0.02 | Apr 15, 2022 | Windows Kerberos Remote Code Execution Vulnerability | ||
| CVE-2021-36958 | Hig | 0.53 | 7.8 | 0.31 | Aug 12, 2021 | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;… | ||
| CVE-2021-34492 | Hig | 0.53 | 8.1 | 0.02 | Jul 14, 2021 | Windows Certificate Spoofing Vulnerability | ||
| CVE-2021-24086 | Hig | 0.53 | 7.5 | 0.59 | Feb 25, 2021 | Windows TCP/IP Denial of Service Vulnerability | ||
| CVE-2020-1400 | Hig | 0.53 | 7.8 | 0.24 | Jul 14, 2020 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407. | ||
| CVE-2020-0665 | Hig | 0.53 | 8.1 | 0.04 | Feb 11, 2020 | An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'. | ||
| CVE-2019-1424 | Hig | 0.53 | 8.1 | 0.03 | Nov 12, 2019 | A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'. |
- risk 0.54cvss 8.1epss 0.20
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability."
- risk 0.54cvss 8.1epss 0.22
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003…
- risk 0.53cvss 8.2epss 0.00
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.2epss 0.00
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.2epss 0.00
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.2epss 0.00
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.2epss 0.00
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.1epss 0.01
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.53cvss 7.3epss 0.72
Windows libarchive Remote Code Execution Vulnerability
- risk 0.53cvss 5.4epss 0.02
Windows Mark of the Web Security Feature Bypass Vulnerability
- risk 0.53cvss 8.1epss 0.11
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.02
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.02
Windows Kerberos Remote Code Execution Vulnerability
- risk 0.53cvss 7.8epss 0.31
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;…
- risk 0.53cvss 8.1epss 0.02
Windows Certificate Spoofing Vulnerability
- risk 0.53cvss 7.5epss 0.59
Windows TCP/IP Denial of Service Vulnerability
- risk 0.53cvss 7.8epss 0.24
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.
- risk 0.53cvss 8.1epss 0.04
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.
- risk 0.53cvss 8.1epss 0.03
A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'.
Page 20 of 135