Windows
by Microsoft
CVEs (2,699)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2012-2897 | Hig | 0.52 | 7.8 | 0.22 | Sep 26, 2012 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other… | ||
| CVE-2026-71345 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. | ||
| CVE-2026-70569 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69691 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69538 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. | ||
| CVE-2026-69535 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69455 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69307 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69284 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65775 | Hig | 0.51 | 7.8 | 0.03 | Aug 11, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62779 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62711 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-42976 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-45656 | Hig | 0.51 | 7.8 | 0.00 | Jun 9, 2026 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. | ||
| CVE-2026-34330 | Hig | 0.51 | 7.8 | 0.00 | May 12, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-33834 | Hig | 0.51 | 7.8 | 0.00 | May 12, 2026 | Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-32165 | Hig | 0.51 | 7.8 | 0.00 | Apr 14, 2026 | Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-26183 | Hig | 0.51 | 7.8 | 0.00 | Apr 14, 2026 | Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-21238 | Hig | 0.51 | 7.8 | 0.03 | Feb 10, 2026 | Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-20832 | Hig | 0.51 | 7.8 | 0.00 | Jan 13, 2026 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability |
- risk 0.52cvss 7.8epss 0.22
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other…
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.03
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.
- risk 0.51cvss 7.8epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.03
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
Page 26 of 135