CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
Windows DNS Spoofing Vulnerability | 7.5 |
HIGH |
||
Windows Initial Machine Configuration Elevation of Privilege Vulnerability | 6.8 |
MEDIUM |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows SmartScreen Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows OLE Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability | 4.2 |
MEDIUM |
||
Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Deployment Services Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Hyper-V Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows IP Routing Management Snapin Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows IP Routing Management Snapin Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows IP Routing Management Snapin Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kerberos Elevation of Privilege Vulnerability | 8.1 |
HIGH |
||
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows TCP/IP Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Mark of the Web Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Kernel Streaming Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Scripting Engine Memory Corruption Vulnerability | 7.5 |
HIGH |
||
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows Remote Desktop Licensing Service Denial of Service Vulnerability | 5.9 |
MEDIUM |
||
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Remote Desktop Licensing Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
Windows Enroll Engine Security Feature Bypass Vulnerability | 7 |
HIGH |
||
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 7.5 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
BitLocker Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Workstation Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
PowerShell Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
DHCP Server Service Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
PowerShell Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Themes Spoofing Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows Line Printer Daemon Service Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Microsoft Message Queuing Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8.4 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows MultiPoint Services Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 6.8 |
MEDIUM |
||
Windows MSHTML Platform Spoofing Vulnerability | 7.5 |
HIGH |
||
Windows Fax Service Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Windows File Explorer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft WS-Discovery Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Remote Desktop Licensing Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Remote Desktop Licensing Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows TCP/IP Information Disclosure Vulnerability | 7.5 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
Windows Imaging Component Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Codecs Library Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft Windows Codecs Library Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
PowerShell Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Filtering Platform Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
Windows Image Acquisition Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft Windows Server Backup Elevation of Privilege Vulnerability | 6.7 |
MEDIUM |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8 |
HIGH |
||
Windows iSCSI Service Denial of Service Vulnerability | 5.3 |
MEDIUM |
||
Windows Cryptographic Services Security Feature Bypass Vulnerability | 7.5 |
HIGH |
||
Windows NTLM Spoofing Vulnerability | 7.1 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Cryptographic Services Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Storage Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Streaming Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Microsoft Streaming Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Standards-Based Storage Management Service Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Winlogon Elevation of Privilege Vulnerability | 5.5 |
MEDIUM |
||
Winlogon Elevation of Privilege Vulnerability | 5.5 |
MEDIUM |
||
Windows Themes Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Distributed File System (DFS) Remote Code Execution Vulnerability | 6.7 |
MEDIUM |
||
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Windows Wi-Fi Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows OLE Remote Code Execution Vulnerability | 8 |
HIGH |
||
Windows Container Manager Service Elevation of Privilege Vulnerability | 6.8 |
MEDIUM |
||
Windows Remote Access Connection Manager Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows MSHTML Platform Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Secure Boot Security Feature Bypass Vulnerability | 7.1 |
HIGH |
||
Secure Boot Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
Windows Authentication Elevation of Privilege Vulnerability | 4.3 |
MEDIUM |
||
Windows Storage Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
SmartScreen Prompt Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
Windows Error Reporting Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
Windows Hyper-V Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
Internet Shortcut Files Security Feature Bypass Vulnerability | 8.1 |
HIGH |
||
Windows Printing Service Spoofing Vulnerability | 7.5 |
HIGH |
||
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows DNS Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Internet Connection Sharing (ICS) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Microsoft ODBC Driver Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 5.9 |
MEDIUM |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
Windows USB Generic Parent Driver Remote Code Execution Vulnerability | 6.4 |
MEDIUM |
||
Windows Hyper-V Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
Trusted Compute Base Elevation of Privilege Vulnerability | 4.1 |
MEDIUM |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows OLE Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows SmartScreen Security Feature Bypass Vulnerability | 7.6 |
HIGH |
||
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Information Disclosure Vulnerability | 4.6 |
MEDIUM |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Themes Spoofing Vulnerability | 6.5 |
MEDIUM |
||
Microsoft Message Queuing Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Cryptographic Services Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Bluetooth Driver Spoofing Vulnerability | 5.7 |
MEDIUM |
||
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
Windows Server Key Distribution Service Security Feature Bypass | 6.1 |
MEDIUM |
||
Windows TCP/IP Information Disclosure Vulnerability | 5.3 |
MEDIUM |
||
Remote Desktop Client Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
Windows Hyper-V Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows libarchive Remote Code Execution Vulnerability | 7.3 |
HIGH |
||
Windows CoreMessaging Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS. | 6.8 |
MEDIUM |
||
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with. | 9.8 |
CRITICAL |
||
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory. | 7.5 |
HIGH |
||
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. | 4.7 |
MEDIUM |
||
Windows Search Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
Microsoft Streaming Service Elevation of Privilege Vulnerability | 8.4 |
HIGH |
||
Windows SMB Denial of Service Vulnerability | 7.5 |
HIGH |
||
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context. | 7.8 |
HIGH |
||
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM. | 5.5 |
MEDIUM |
||
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows SmartScreen Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows Mark of the Web Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Mark of the Web Security Feature Bypass Vulnerability | 5.4 |
MEDIUM |
||
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Scripting Languages Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows COM+ Event System Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability. | 7.8 |
HIGH |
||
Windows Clustered Shared Volume Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Clustered Shared Volume Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Failover Cluster Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Remote Desktop Protocol Client Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
Storage Spaces Direct Elevation of Privilege Vulnerability | 8.2 |
HIGH |
||
Windows LSA Spoofing Vulnerability | 8.1 |
HIGH |
||
Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Authentication Information Disclosure Vulnerability | 7.4 |
HIGH |
||
Windows Hyper-V Security Feature Bypass Vulnerability | 4.1 |
MEDIUM |
||
Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
Windows User Profile Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Denial of Service Vulnerability | 7.5 |
HIGH |
||
NTFS Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
Windows Text Shaping Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Nearby Sharing Elevation of Privilege Vulnerability | 8 |
HIGH |
||
Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.7 |
HIGH |
||
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9 |
CRITICAL |
||
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
Windows AD FS Security Feature Bypass Vulnerability | 7.5 |
HIGH |
||
Windows Installer Spoofing Vulnerability | 5.5 |
MEDIUM |
||
Rich Text Edit Control Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Hyper-V Remote Code Execution Vulnerability | 9 |
CRITICAL |
||
Windows exFAT File System Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Fast FAT File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
Windows Print Spooler Spoofing Vulnerability | 8.8 |
HIGH |
||
Windows TCP/IP Denial of Service Vulnerability | 7.5 |
HIGH |
||
Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
Windows DCOM Server Security Feature Bypass | 6.5 |
MEDIUM |