Windows Kernel
by Microsoft
CVEs (421)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-8497 | Hig | 0.51 | 7.8 | 0.02 | Oct 10, 2018 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. | ||
| CVE-2018-8313 | Hig | 0.51 | 7.8 | 0.02 | Jul 11, 2018 | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10,… | ||
| CVE-2018-0963 | Hig | 0.51 | 7.8 | 0.02 | Apr 12, 2018 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. | ||
| CVE-2026-54113 | Hig | 0.49 | 7.5 | 0.01 | Aug 11, 2026 | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network. | ||
| CVE-2020-1378 | Hig | 0.49 | 7.5 | 0.04 | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit… | ||
| CVE-2018-8134 | Hig | 0.49 | 7.0 | 0.04 | May 9, 2018 | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. | ||
| CVE-2025-55693 | Hig | 0.48 | 7.4 | 0.02 | Oct 14, 2025 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2024-43553 | Hig | 0.48 | 7.4 | 0.01 | Oct 8, 2024 | NT OS Kernel Elevation of Privilege Vulnerability | ||
| CVE-2024-21443 | Hig | 0.48 | 7.3 | 0.01 | Mar 12, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2022-21881 | Hig | 0.48 | 7.0 | 0.24 | Jan 11, 2022 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2025-49666 | Hig | 0.47 | 7.2 | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network. | ||
| CVE-2024-43502 | Hig | 0.47 | 7.1 | 0.06 | Oct 8, 2024 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2026-69578 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69473 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69466 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69366 | Hig | 0.46 | 7.1 | 0.01 | Sep 8, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-68884 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-68846 | Hig | 0.46 | 7.1 | 0.01 | Sep 8, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-62788 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62780 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
- risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10,…
- risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.04
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit…
- risk 0.49cvss 7.0epss 0.04
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
- risk 0.48cvss 7.4epss 0.02
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
- risk 0.48cvss 7.4epss 0.01
NT OS Kernel Elevation of Privilege Vulnerability
- risk 0.48cvss 7.3epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.48cvss 7.0epss 0.24
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.01
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.
- risk 0.47cvss 7.1epss 0.06
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.01
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.01
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Page 9 of 22