Vendor CVEs

Microsoft

All CVEs

18,138 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-24475	Microsoft Edge	Hig	0.54	8.3	0.02		Apr 5, 2022	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21837	Microsoft Sharepoint Server	Hig	0.54	8.3	0.03		Jan 11, 2022	Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34469	Microsoft Office	Hig	0.54	8.2	0.04		Jul 14, 2021	Microsoft Office Security Feature Bypass Vulnerability
CVE-2021-33741	Microsoft Edge	Hig	0.54	8.2	0.03		Jun 8, 2021	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-31955	Microsoft Windows Kernel	Med	0.54	5.5	0.81	KEV	Jun 8, 2021	Windows Kernel Information Disclosure Vulnerability
CVE-2020-17140	Microsoft Windows SMB	Hig	0.54	8.1	0.15		Dec 10, 2020	Windows SMB Information Disclosure Vulnerability
CVE-2020-1074	Microsoft Windows Jet Database Engine	Hig	0.54	7.8	0.46		Sep 11, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this…
CVE-2019-1476	Microsoft Windows AppX Deployment Service	Hig	0.54	7.8	0.05		Dec 10, 2019	An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
CVE-2019-1471	Microsoft Windows Hyper-V	Hig	0.54	8.2	0.08		Dec 10, 2019	A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1364	Microsoft Windows	Hig	0.54	7.8	0.03		Oct 10, 2019	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1311	Microsoft Windows Imaging API	Hig	0.54	7.8	0.36		Oct 10, 2019	A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
CVE-2019-1089	Microsoft Windows	Hig	0.54	7.8	0.05		Jul 15, 2019	An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this…
CVE-2019-0943	Microsoft Windows	Hig	0.54	7.8	0.02		Jun 12, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…
CVE-2019-0881	Microsoft Windows Kernel	Hig	0.54	7.8	0.03		May 16, 2019	An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2019-0836	Microsoft Windows	Hig	0.54	7.8	0.04		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
CVE-2019-0805	Microsoft Windows	Hig	0.54	7.8	0.03		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0735	Microsoft Windows	Hig	0.54	7.8	0.04		Apr 9, 2019	An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVE-2019-0732	Microsoft Windows	Hig	0.54	7.8	0.04		Apr 9, 2019	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0731	Microsoft Windows	Hig	0.54	7.8	0.04		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0730	Microsoft Windows	Hig	0.54	7.8	0.04		Apr 9, 2019	An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0667	Microsoft Windows VBScript Engine	Hig	0.54	7.5	0.31		Apr 8, 2019	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0772.
CVE-2019-0570	Microsoft Windows Server 2012	Hig	0.54	7.8	0.03		Jan 8, 2019	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server…
CVE-2019-0555	Microsoft Windows Server 2012	Hig	0.54	7.8	0.03		Jan 8, 2019	An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows…
CVE-2018-8584	Microsoft Windows Server 2016	Hig	0.54	7.8	0.03		Nov 14, 2018	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8550	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03		Nov 14, 2018	An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server…
CVE-2018-8411	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03		Oct 10, 2018	An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows…
CVE-2018-8410	Microsoft Windows 7	Hig	0.54	7.8	0.04		Sep 13, 2018	An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows…
CVE-2018-8269	Microsoft Microsoft.Data.OData	Hig	0.54	7.5	0.27		Sep 13, 2018	A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
CVE-2018-0952	Microsoft Windows Server 2016	Hig	0.54	7.8	0.06		Aug 15, 2018	An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2018-8231	Microsoft Windows Server 2016	Hig	0.54	8.1	0.16		Jun 14, 2018	A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-1038	Microsoft Windows Server 2008	Hig	0.54	7.8	0.09		Apr 2, 2018	The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."
CVE-2018-0877	Microsoft Windows Server 2016	Hig	0.54	7.8	0.03		Mar 14, 2018	The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege…
CVE-2018-6947	Nomachine Nomachine	Hig	0.54	7.8	0.03		Feb 28, 2018	An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8…
CVE-2018-0752	Microsoft Windows Server 2012	Hig	0.54	7.8	0.03		Jan 4, 2018	The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0749	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03		Jan 4, 2018	The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…
CVE-2018-0748	Microsoft Windows Server 2008	Hig	0.54	7.8	0.03		Jan 4, 2018	The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…
CVE-2017-0161	Microsoft Windows Server 2008	Hig	0.54	8.1	0.11		Sep 13, 2017	The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it…
CVE-2017-8665	Microsoft Xamarin.iOS	Hig	0.54	7.8	0.04		Aug 15, 2017	The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Privilege Vulnerability."
CVE-2017-0152	Microsoft Scripting Engine	Hig	0.54	8.1	0.11		Jul 17, 2017	A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the…
CVE-2017-8565	Microsoft Windows Server 2008	Hig	0.54	8.1	0.18		Jul 11, 2017	Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka…
CVE-2017-0272	Microsoft Windows Server 2008	Hig	0.54	8.1	0.17		May 12, 2017	The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote…
CVE-2017-0233	Microsoft Edge	Hig	0.54	8.3	0.03		May 12, 2017	An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0241.
CVE-2017-0165	Microsoft Windows Server 2012	Hig	0.54	7.8	0.03		Apr 12, 2017	An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."
CVE-2017-0104	Microsoft Windows Server 2008	Hig	0.54	8.1	0.14		Mar 17, 2017	The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."
CVE-2017-0100	Microsoft Windows Server 2008	Hig	0.54	7.8	0.05		Mar 17, 2017	A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows…
CVE-2017-0039	Microsoft Windows	Hig	0.54	7.8	0.37		Mar 17, 2017	Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
CVE-2016-7188	Microsoft Windows	Hig	0.54	7.8	0.04		Oct 14, 2016	The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."
CVE-2016-7185	Microsoft Windows	Hig	0.54	7.8	0.03		Oct 14, 2016	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-3220	Microsoft Windows	Hig	0.54	7.8	0.06		Jun 16, 2016	atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted…
CVE-2016-3219	Microsoft Windows 10 1909	Hig	0.54	7.8	0.06		Jun 16, 2016	The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVE-2022-24475HigApr 5, 2022
Microsoft
Edge
risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21837HigJan 11, 2022
Microsoft
Sharepoint Server
risk 0.54cvss 8.3epss 0.03
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34469HigJul 14, 2021
Microsoft
Office
risk 0.54cvss 8.2epss 0.04
Microsoft Office Security Feature Bypass Vulnerability
CVE-2021-33741HigJun 8, 2021
Microsoft
Edge
risk 0.54cvss 8.2epss 0.03
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-31955MedKEVJun 8, 2021
Microsoft
Windows Kernel
risk 0.54cvss 5.5epss 0.81
Windows Kernel Information Disclosure Vulnerability
CVE-2020-17140HigDec 10, 2020
Microsoft
Windows SMB
risk 0.54cvss 8.1epss 0.15
Windows SMB Information Disclosure Vulnerability
CVE-2020-1074HigSep 11, 2020
Microsoft
Windows Jet Database Engine
risk 0.54cvss 7.8epss 0.46
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this…
CVE-2019-1476HigDec 10, 2019
Microsoft
Windows AppX Deployment Service
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
CVE-2019-1471HigDec 10, 2019
Microsoft
Windows Hyper-V
risk 0.54cvss 8.2epss 0.08
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
CVE-2019-1364HigOct 10, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1311HigOct 10, 2019
Microsoft
Windows Imaging API
risk 0.54cvss 7.8epss 0.36
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
CVE-2019-1089HigJul 15, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.05
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this…
CVE-2019-0943HigJun 12, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.02
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then…
CVE-2019-0881HigMay 16, 2019
Microsoft
Windows Kernel
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2019-0836HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
CVE-2019-0805HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0735HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVE-2019-0732HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0731HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0730HigApr 9, 2019
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0667HigApr 8, 2019
Microsoft
Windows VBScript Engine
risk 0.54cvss 7.5epss 0.31
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0772.
CVE-2019-0570HigJan 8, 2019
Microsoft
Windows Server 2012
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server…
CVE-2019-0555HigJan 8, 2019
Microsoft
Windows Server 2012
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows…
CVE-2018-8584HigNov 14, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVE-2018-8550HigNov 14, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server…
CVE-2018-8411HigOct 10, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows…
CVE-2018-8410HigSep 13, 2018
Microsoft
Windows 7
risk 0.54cvss 7.8epss 0.04
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows…
CVE-2018-8269HigSep 13, 2018
Microsoft
Microsoft.Data.OData
risk 0.54cvss 7.5epss 0.27
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
CVE-2018-0952HigAug 15, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 7.8epss 0.06
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual…
CVE-2018-8231HigJun 14, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 8.1epss 0.16
A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVE-2018-1038HigApr 2, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.09
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."
CVE-2018-0877HigMar 14, 2018
Microsoft
Windows Server 2016
risk 0.54cvss 7.8epss 0.03
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege…
CVE-2018-6947HigFeb 28, 2018
Nomachine
Nomachine
risk 0.54cvss 7.8epss 0.03
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8…
CVE-2018-0752HigJan 4, 2018
Microsoft
Windows Server 2012
risk 0.54cvss 7.8epss 0.03
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka…
CVE-2018-0749HigJan 4, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…
CVE-2018-0748HigJan 4, 2018
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.03
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the…
CVE-2017-0161HigSep 13, 2017
Microsoft
Windows Server 2008
risk 0.54cvss 8.1epss 0.11
The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it…
CVE-2017-8665HigAug 15, 2017
Microsoft
Xamarin.iOS
risk 0.54cvss 7.8epss 0.04
The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Privilege Vulnerability."
CVE-2017-0152HigJul 17, 2017
Microsoft
Scripting Engine
risk 0.54cvss 8.1epss 0.11
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the…
CVE-2017-8565HigJul 11, 2017
Microsoft
Windows Server 2008
risk 0.54cvss 8.1epss 0.18
Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when PSObject wraps a CIM Instance, aka…
CVE-2017-0272HigMay 12, 2017
Microsoft
Windows Server 2008
risk 0.54cvss 8.1epss 0.17
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote…
CVE-2017-0233HigMay 12, 2017
Microsoft
Edge
risk 0.54cvss 8.3epss 0.03
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0241.
CVE-2017-0165HigApr 12, 2017
Microsoft
Windows Server 2012
risk 0.54cvss 7.8epss 0.03
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."
CVE-2017-0104HigMar 17, 2017
Microsoft
Windows Server 2008
risk 0.54cvss 8.1epss 0.14
The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, aka "iSNS Server Memory Corruption Vulnerability."
CVE-2017-0100HigMar 17, 2017
Microsoft
Windows Server 2008
risk 0.54cvss 7.8epss 0.05
A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows…
CVE-2017-0039HigMar 17, 2017
Microsoft
Windows
risk 0.54cvss 7.8epss 0.37
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
CVE-2016-7188HigOct 14, 2016
Microsoft
Windows
risk 0.54cvss 7.8epss 0.04
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."
CVE-2016-7185HigOct 14, 2016
Microsoft
Windows
risk 0.54cvss 7.8epss 0.03
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka…
CVE-2016-3220HigJun 16, 2016
Microsoft
Windows
risk 0.54cvss 7.8epss 0.06
atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted…
CVE-2016-3219HigJun 16, 2016
Microsoft
Windows 10 1909
risk 0.54cvss 7.8epss 0.06
The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Page 57 of 363