Windows
by Microsoft
CVEs (2,699)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-1311 | Hig | 0.53 | 7.8 | 0.36 | Oct 10, 2019 | A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'. | ||
| CVE-2019-0734 | Hig | 0.53 | 8.1 | 0.04 | May 16, 2019 | An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator.The update addresses this… | ||
| CVE-2018-8210 | Hig | 0.53 | 7.8 | 0.25 | Jun 14, 2018 | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10… | ||
| CVE-2017-11812 | Hig | 0.53 | 7.5 | 0.47 | Oct 13, 2017 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… | ||
| CVE-2017-0166 | Hig | 0.53 | 8.1 | 0.06 | Apr 12, 2017 | An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain… | ||
| CVE-2016-3396 | Hig | 0.53 | 7.8 | 0.24 | Oct 14, 2016 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for… | ||
| CVE-2016-3237 | Hig | 0.53 | 7.5 | 0.17 | Aug 9, 2016 | Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a… | ||
| CVE-2016-0091 | Hig | 0.53 | 7.8 | 0.24 | Mar 9, 2016 | OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote… | ||
| CVE-2013-3129 | Hig | 0.53 | 7.8 | 0.32 | Jul 10, 2013 | Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,… | ||
| CVE-2011-0042 | Hig | 0.53 | 7.8 | 0.33 | Mar 9, 2011 | SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not… | ||
| CVE-2010-1883 | Hig | 0.53 | 7.8 | 0.23 | Oct 13, 2010 | Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an… | ||
| CVE-2026-69689 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69643 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69619 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69427 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2024-30077 | Hig | 0.52 | 8.0 | 0.02 | Jun 11, 2024 | Windows OLE Remote Code Execution Vulnerability | ||
| CVE-2024-30075 | Hig | 0.52 | 8.0 | 0.01 | Jun 11, 2024 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | ||
| CVE-2024-30074 | Hig | 0.52 | 8.0 | 0.01 | Jun 11, 2024 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | ||
| CVE-2022-35756 | Hig | 0.52 | 7.8 | 0.11 | May 31, 2023 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2021-40464 | Hig | 0.52 | 8.0 | 0.01 | Oct 13, 2021 | Windows Nearby Sharing Elevation of Privilege Vulnerability |
- risk 0.53cvss 7.8epss 0.36
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
- risk 0.53cvss 8.1epss 0.04
An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator.The update addresses this…
- risk 0.53cvss 7.8epss 0.25
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10…
- risk 0.53cvss 7.5epss 0.47
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…
- risk 0.53cvss 8.1epss 0.06
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain…
- risk 0.53cvss 7.8epss 0.24
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for…
- risk 0.53cvss 7.5epss 0.17
Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a…
- risk 0.53cvss 7.8epss 0.24
OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote…
- risk 0.53cvss 7.8epss 0.32
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,…
- risk 0.53cvss 7.8epss 0.33
SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not…
- risk 0.53cvss 7.8epss 0.23
Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an…
- risk 0.52cvss 8.0epss 0.01
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- risk 0.52cvss 8.0epss 0.01
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
- risk 0.52cvss 8.0epss 0.01
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
- risk 0.52cvss 8.0epss 0.01
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
- risk 0.52cvss 8.0epss 0.02
Windows OLE Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
- risk 0.52cvss 7.8epss 0.11
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows Nearby Sharing Elevation of Privilege Vulnerability
Page 21 of 135