VYPR

Windows

by Microsoft

CVEs (2,653)

  • CVE-2008-3465CriDec 10, 2008
    Microsoft
    Windows 2000
    risk 0.65cvss 9.8epss 0.14

    Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed…

  • CVE-2025-21311CriJan 14, 2025
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.02

    Windows NTLM V1 Elevation of Privilege Vulnerability

  • CVE-2024-3566CriApr 10, 2024
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.07

    A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.

  • CVE-2023-32015CriJun 14, 2023
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.02

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  • CVE-2023-32014CriJun 14, 2023
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.02

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  • CVE-2023-29363CriJun 14, 2023
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.02

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  • CVE-2023-24943CriMay 9, 2023
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.05

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  • CVE-2023-28250CriApr 11, 2023
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.02

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  • CVE-2022-21849CriJan 11, 2022
    Microsoft
    Windows
    risk 0.64cvss 9.8epss 0.06

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

  • CVE-2020-0986HigKEVJun 9, 2020
    Microsoft
    Windows Kernel
    risk 0.64cvss 7.8epss 0.16

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266,…

  • CVE-2020-0690CriMar 12, 2020
    Microsoft
    Directx
    risk 0.64cvss 9.8epss 0.07

    An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.

  • CVE-2019-0786CriApr 9, 2019
    Microsoft
    Server Message Block
    risk 0.64cvss 9.8epss 0.07

    An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.

  • CVE-2017-11899CriDec 12, 2017
    Microsoft
    Windows Server 2016
    risk 0.64cvss 9.8epss 0.05

    Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".

  • CVE-2017-0090HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.44

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…

  • CVE-2017-0088HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.43

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability."

  • CVE-2017-0087HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.44

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…

  • CVE-2017-0086HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.44

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…

  • CVE-2017-0083HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.44

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…

  • CVE-2017-0072HigMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 8.8epss 0.44

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in…

  • CVE-2017-0005HigKEVMar 17, 2017
    Microsoft
    Windows
    risk 0.64cvss 7.8epss 0.11

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…

Page 6 of 133