VYPR

Windows 10 1909

by Microsoft

CVEs (4,279)

  • CVE-2023-28252HigKEVApr 11, 2023
    Microsoft
    Windows Common Log File System Driver
    risk 0.76cvss 7.8epss 0.49

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  • CVE-2023-36884HigKEVJul 11, 2023
    Microsoft
    Windows Search
    risk 0.75cvss 7.5epss 0.99

    Windows Search Remote Code Execution Vulnerability

  • CVE-2022-21999HigKEVFeb 9, 2022
    Microsoft
    Windows Print Spooler
    risk 0.75cvss 7.8epss 0.42

    Windows Print Spooler Elevation of Privilege Vulnerability

  • CVE-2020-0787HigKEVMar 12, 2020
    Microsoft
    Windows Background Intelligent Transfer Service (BITS)
    risk 0.75cvss 7.8epss 0.43

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

  • CVE-2018-8414HigKEVAug 15, 2018
    Microsoft
    Windows Shell
    risk 0.75cvss 8.8epss 0.74

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

  • CVE-2017-0213HigKEVMay 12, 2017
    Microsoft
    Windows Server 2008
    risk 0.75cvss 7.3epss 0.84

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an…

  • CVE-2016-0099HigKEVMar 9, 2016
    Microsoft
    Windows
    risk 0.75cvss 7.8epss 0.37

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain…

  • CVE-2023-21554CriApr 11, 2023
    Microsoft
    Message Queuing
    risk 0.74cvss 9.8epss 0.95

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  • CVE-2022-21907CriJan 11, 2022
    Microsoft
    HTTP Protocol Stack
    risk 0.74cvss 9.8epss 0.93

    HTTP Protocol Stack Remote Code Execution Vulnerability

  • CVE-2020-1020HigKEVApr 15, 2020
    Microsoft
    Windows
    risk 0.74cvss 8.8epss 0.65

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…

  • CVE-2019-1405HigKEVNov 12, 2019
    Microsoft
    Windows Universal Plug and Play (UPnP) service
    risk 0.74cvss 7.8epss 0.30

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

  • CVE-2016-7256HigKEVNov 10, 2016
    Microsoft
    Windows
    risk 0.74cvss 8.8epss 0.65

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute…

  • CVE-2024-43461HigKEVSep 10, 2024
    Microsoft
    MSHTML Platform
    risk 0.73cvss 8.8epss 0.54

    Windows MSHTML Platform Spoofing Vulnerability

  • CVE-2023-21674HigKEVJan 10, 2023
    Microsoft
    Windows
    risk 0.73cvss 8.8epss 0.42

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  • CVE-2019-1215HigKEVSep 11, 2019
    Microsoft
    Winsock
    risk 0.73cvss 7.8epss 0.19

    An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

  • CVE-2018-8440HigKEVSep 13, 2018
    Microsoft
    Windows Server 2008
    risk 0.73cvss 7.8epss 0.18

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows…

  • CVE-2016-3309HigKEVAug 9, 2016
    Microsoft
    Windows
    risk 0.73cvss 7.8epss 0.21

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…

  • CVE-2016-3236CriJun 16, 2016
    Microsoft
    Windows
    risk 0.73cvss 9.8epss 0.77

    The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows…

  • CVE-2019-0543HigKEVJan 8, 2019
    Microsoft
    Windows Server 2008
    risk 0.72cvss 7.8epss 0.05

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows…

  • CVE-2016-7255HigKEVNov 10, 2016
    Microsoft
    Windows
    risk 0.72cvss 7.8epss 0.81

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted…

Page 2 of 214