CPE Details
Microsoft Windows 10 21H1 on x64
21h1
2021-07-15 13:05 +00:00
2022-12-09 17:15 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*
Informations
Vendor
microsoftProduct
windows_10Version
21h1Target Hardware
x64Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| PowerShell Remote Code Execution Vulnerability | 8.5 |
HIGH |
||
| Windows Fax Compose Form Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| .NET Framework Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Contacts Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Media Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Media Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Error Reporting Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Bluetooth Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Projected File System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Raw Image Extension Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Group Policy Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Extensible File Allocation Table Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Kerberos Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Human Interface Device Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows HTTP.sys Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
| .NET Framework Information Disclosure Vulnerability | 5.8 |
MEDIUM |
||
| Windows Group Policy Elevation of Privilege Vulnerability | 6.4 |
MEDIUM |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability | 5.9 |
MEDIUM |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| BitLocker Security Feature Bypass Vulnerability | 4.6 |
MEDIUM |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Overlay Filter Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Overlay Filter Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Bind Filter Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Scripting Languages Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows GDI+ Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows CryptoAPI Spoofing Vulnerability | 7.5 |
HIGH |
||
| Windows NTLM Spoofing Vulnerability | 6.5 |
MEDIUM |
||
| Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability | 5.9 |
MEDIUM |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Local Session Manager (LSM) Denial of Service Vulnerability | 7.7 |
HIGH |
||
| Windows Mixed Reality Developer Tools Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Group Policy Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Active Directory Certificate Services Security Feature Bypass | 7.5 |
HIGH |
||
| Windows Hyper-V Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DHCP Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Event Logging Service Denial of Service Vulnerability | 4.3 |
MEDIUM |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows WLAN Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Group Policy Preference Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Group Policy Preference Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Memory Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Local Session Manager (LSM) Denial of Service Vulnerability | 7.7 |
HIGH |
||
| Windows Group Policy Preference Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Resilient File System Elevation of Privilege | 7.8 |
HIGH |
||
| Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 3.3 |
LOW |
||
| Windows DHCP Client Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Storage Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows USB Serial Driver Information Disclosure Vulnerability | 4.3 |
MEDIUM |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability | 6.6 |
MEDIUM |
||
| Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Workstation Service Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Active Directory Domain Services Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Security Support Provider Interface Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows CD-ROM File System Driver Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Server Service Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Web Account Manager Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Raw Image Extension Remote Code Execution Vulnerability | 7.3 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Group Policy Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Enterprise App Management Service Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Event Tracing Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows GDI Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Microsoft ODBC Driver Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Channel Denial of Service Vulnerability | 8.2 |
HIGH |
||
| Windows Credential Roaming Service Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
| .NET Framework Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Photo Import API Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
| A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
| A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media. | 6.7 |
MEDIUM |
||
| Windows Defender Credential Guard Security Feature Bypass Vulnerability | 7.1 |
HIGH |
||
| Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hello Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
| Windows Error Reporting Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.3 |
HIGH |
||
| Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Direct Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft ATA Port Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Defender Credential Guard Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Defender Credential Guard Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Defender Credential Guard Security Feature Bypass Vulnerability | 6 |
MEDIUM |
||
| Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Defender Credential Guard Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Fax Service Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows WebBrowser Control Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Bluetooth Service Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Defender Credential Guard Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
| Xbox Live Save Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Hyper-V Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
| Windows Shell Remote Code Execution Vulnerability | 8.4 |
HIGH |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Server Service Tampering Vulnerability | 8.8 |
HIGH |
||
| Windows GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Connected Devices Platform Service Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
| Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows IIS Server Elevation of Privilege Vulnerability | 7.4 |
HIGH |
||
| Windows Security Account Manager (SAM) Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Group Policy Elevation of Privilege Vulnerability | 6.6 |
MEDIUM |
||
| Windows Boot Manager Security Feature Bypass Vulnerability | 7.4 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows BitLocker Information Disclosure Vulnerability | 5.7 |
MEDIUM |
||
| Windows Fax Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| BitLocker Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
| Windows.Devices.Picker.dll Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 6.8 |
MEDIUM |
||
| Internet Information Services Dynamic Compression Module Denial of Service Vulnerability | 7.3 |
HIGH |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
| Performance Counters for Windows Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Graphics Component Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Internet Information Services Cachuri Module Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability | 6.6 |
MEDIUM |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Kernel Information Disclosure Vulnerability | 4.7 |
MEDIUM |
||
| Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability | 6.5 |
MEDIUM |
||
| Local Security Authority Subsystem Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kerberos Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Kerberos AppContainer Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 8.5 |
HIGH |
||
| Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Desired State Configuration (DSC) Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows File History Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows iSCSI Discovery Service Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Container Manager Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot. | 7.5 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| .NET Framework Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Print Spooler Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| BitLocker Security Feature Bypass Vulnerability | 4.2 |
MEDIUM |
||
| Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Push Notifications Apps Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows WLAN AutoConfig Service Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Server Service Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows WLAN AutoConfig Service Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows NTFS Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Kerberos Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Address Book Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Authentication Information Disclosure Vulnerability | 7.4 |
HIGH |
||
| Windows Hyper-V Security Feature Bypass Vulnerability | 4.1 |
MEDIUM |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 5.6 |
MEDIUM |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows PlayToManager Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Graphics Component Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Fax Compose Form Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Secure Channel Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| .NET Framework Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows File Server Resource Management Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows DNS Server Remote Code Execution Vulnerability | 7.2 |
HIGH |
||
| Windows File Server Resource Management Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows File Explorer Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Work Folder Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| PowerShell Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Telephony Server Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows AppX Package Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kerberos Remote Code Execution Vulnerability | 8.1 |
HIGH |
||
| Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Server Service Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Win32 Stream Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Remote Desktop Protocol Remote Code Execution Vulnerability | 8 |
HIGH |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows SMB Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows iSCSI Target Service Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Direct Show - Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Network File System Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Local Security Authority (LSA) Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Kerberos Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Win32 File Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Kernel Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Win32 Stream Enumeration Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Update Stack Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Win32 File Enumeration Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Remote Desktop Protocol Client Information Disclosure Vulnerability | 5.4 |
MEDIUM |
||
| Windows HTML Platforms Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
| Tablet Windows User Interface Application Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Fax and Scan Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Security Support Provider Interface Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows PDEV Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows NT OS Kernel Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Event Tracing Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Inking COM Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.2 |
HIGH |
||
| Windows ALPC Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Common Log File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Microsoft Defender for Endpoint Spoofing Vulnerability | 5.9 |
MEDIUM |
||
| Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Media Foundation Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Media Foundation Information Disclosure Vulnerability | 3.3 |
LOW |
||
| Windows Hyper-V Denial of Service Vulnerability | 4.7 |
MEDIUM |
||
| Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Named Pipe File System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 5.6 |
MEDIUM |
||
| Windows Common Log File System Driver Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
| Windows User Account Profile Picture Denial of Service Vulnerability | 5.5 |
MEDIUM |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.1 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 7.9 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Mobile Device Management Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows DNS Server Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Roaming Security Rights Management Services Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.4 |
MEDIUM |
||
| Workstation Service Remote Protocol Security Feature Bypass Vulnerability | 5.3 |
MEDIUM |
||
| Remote Procedure Call Runtime Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Defender Credential Guard Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
| Windows Kerberos Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| DirectX Graphics Kernel File Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows GDI+ Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass | 7.5 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| DirectX Graphics Kernel Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Defender Application Control Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
| Windows GDI Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Hyper-V Security Feature Bypass Vulnerability | 8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Elevation of Privilege Vulnerability | 9 |
CRITICAL |
||
| Windows Hyper-V Security Feature Bypass Vulnerability | 4.6 |
MEDIUM |
||
| DirectX Graphics Kernel Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Secure Boot Security Feature Bypass Vulnerability | 4.4 |
MEDIUM |
||
| Windows User Profile Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Remote Desktop Protocol Remote Code Execution Vulnerability | 8 |
HIGH |
||
| Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | 6.8 |
MEDIUM |
||
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Modern Execution Server Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows GDI+ Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Geolocation Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Win32k Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Storage Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Tile Data Repository Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Security Center API Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Clipboard User Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Devices Human Interface Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Push Notifications Apps Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows System Launcher Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Connected Devices Platform Service Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows StateRepository API Server file Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows UI Immersive Server API Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Application Model Core API Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Task Flow Data Engine Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows AppContracts API Server Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Windows Accounts Control Elevation of Privilege Vulnerability | 7 |
HIGH |
||
| Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Bind Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 6.5 |
MEDIUM |
||
| Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Cleanup Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Certificate Spoofing Vulnerability | 7.8 |
HIGH |
||
| Microsoft Cryptographic Services Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Virtual Machine IDE Drive Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | 7.5 |
HIGH |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Digital Media Receiver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 5.6 |
MEDIUM |
||
| Windows Kernel Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Recovery Environment Agent Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| NTFS Set Short Name Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Setup Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Microsoft Message Queuing Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Fax Service Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Event Tracing Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| SymCrypt Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Common Log File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Microsoft Message Queuing Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| DirectX Graphics Kernel File Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution | 9.8 |
CRITICAL |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to prevent copied data from being recorded in Cloud History must use specific clipboard formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data to be recorded to a user's Microsoft account. *This bug only affects Firefox for Windows 10+ with Cloud Clipboard enabled. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. | 6.5 |
MEDIUM |
||
| Windows Hello Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
| Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 7.5 |
HIGH |
||
| NTFS Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Feedback Hub Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Chakra Scripting Engine Memory Corruption Vulnerability | 7.5 |
HIGH |
||
| Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Microsoft COM for Windows Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability | 6.8 |
MEDIUM |
||
| Windows NTFS Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 4.4 |
MEDIUM |
||
| NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| NTFS Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Microsoft Edge (Chrome based) Spoofing on IE Mode | 4.3 |
MEDIUM |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Remote Desktop Protocol Client Information Disclosure Vulnerability | 7.4 |
HIGH |
||
| Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | 4.4 |
MEDIUM |
||
| Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability | 9 |
CRITICAL |
||
| Windows AppX Deployment Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Console Window Host Security Feature Bypass Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Fast FAT File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows MSHTML Platform Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Media Audio Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows AppContainer Elevation Of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Bind Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Text Shaping Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Nearby Sharing Elevation of Privilege Vulnerability | 8 |
HIGH |
||
| Windows Network Address Translation (NAT) Denial of Service Vulnerability | 7.7 |
HIGH |
||
| Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 9 |
CRITICAL |
||
| Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
| Windows Installer Spoofing Vulnerability | 5.5 |
MEDIUM |
||
| Rich Text Edit Control Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows exFAT File System Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Fast FAT File System Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Print Spooler Spoofing Vulnerability | 8.8 |
HIGH |
||
| Windows TCP/IP Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows HTTP.sys Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Storage Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Microsoft Windows Update Client Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| BitLocker Security Feature Bypass Vulnerability | 5.7 |
MEDIUM |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Key Storage Provider Security Feature Bypass Vulnerability | 6.5 |
MEDIUM |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows SMB Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows SMB Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Subsystem for Linux Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Installer Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Installer Denial of Service Vulnerability | 6.1 |
MEDIUM |
||
| Windows SMB Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Authenticode Spoofing Vulnerability | 5.5 |
MEDIUM |
||
| Windows Bind Filter Driver Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Windows Scripting Engine Memory Corruption Vulnerability | 8.1 |
HIGH |
||
| Windows Print Spooler Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Bluetooth Driver Elevation of Privilege Vulnerability | 8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Remote Desktop Client Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows MSHTML Platform Remote Code Execution Vulnerability | 7.5 |
HIGH |
||
| Windows Graphics Component Font Parsing Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Graphics Component Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Print Spooler Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Scripting Engine Memory Corruption Vulnerability | 8.8 |
HIGH |
||
| Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | 9.8 |
CRITICAL |
||
| Windows Recovery Environment Agent Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows User Account Profile Picture Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see KB5005652. |
9.8 |
CRITICAL |
||
| Windows Hello Security Feature Bypass Vulnerability | 6.1 |
MEDIUM |
||
| Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows AppContainer Elevation Of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows File History Service Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Hyper-V Remote Code Execution Vulnerability | 9.9 |
CRITICAL |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows MSHTML Platform Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows HTML Platforms Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| GDI+ Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Font Driver Host Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Raw Image Extension Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Win32k Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Installer Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Storage Spaces Controller Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Kernel Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Remote Assistance Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Address Book Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Memory Information Disclosure Vulnerability | 7.7 |
HIGH |
||
| Windows GDI Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows MSHTML Platform Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows GDI Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Partition Management Driver Elevation of Privilege Vulnerability | 6.7 |
MEDIUM |
||
| Windows Certificate Spoofing Vulnerability | 8.1 |
HIGH |
||
| Win32k Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
| DirectWrite Remote Code Execution Vulnerability | 7.8 |
HIGH |
||
| Windows Console Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Bowser.sys Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows LSA Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows AF_UNIX Socket Provider Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows SMB Information Disclosure Vulnerability | 6.5 |
MEDIUM |
||
| Windows Authenticode Spoofing Vulnerability | 5.5 |
MEDIUM |
||
| Azure AD Security Feature Bypass Vulnerability | 8.1 |
HIGH |
||
| Windows Event Tracing Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Windows Installer Spoofing Vulnerability | 6.2 |
MEDIUM |
||
| Windows Remote Access Connection Manager Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Media Foundation Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows Desktop Bridge Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
| Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 8.6 |
HIGH |
||
| Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows DNS Snap-in Remote Code Execution Vulnerability | 8.8 |
HIGH |
||
| Windows Secure Kernel Mode Security Feature Bypass Vulnerability | 6.7 |
MEDIUM |
||
| Windows Projected File System Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows InstallService Elevation of Privilege Vulnerability | 6.1 |
MEDIUM |
||
| Windows TCP/IP Driver Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Server for NFS Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows Hyper-V Denial of Service Vulnerability | 8.6 |
HIGH |
||
| Server for NFS Information Disclosure Vulnerability | 7.5 |
HIGH |
||
| Windows GPSVC Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Server for NFS Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Event Tracing for Windows Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows HTML Platforms Security Feature Bypass Vulnerability | 8.8 |
HIGH |
||
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows TCP/IP Driver Security Feature Bypass Vulnerability | 5.5 |
MEDIUM |
||
| Windows Remote Desktop Services Denial of Service Vulnerability | 7.5 |
HIGH |
||
| Kerberos AppContainer Security Feature Bypass Vulnerability | 9.8 |
CRITICAL |
||
| Windows Bind Filter Driver Information Disclosure Vulnerability | 5.5 |
MEDIUM |
||
| Windows NTLM Elevation of Privilege Vulnerability | 8.8 |
HIGH |
||
| Scripting Engine Memory Corruption Vulnerability | 7.8 |
HIGH |
||
| Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows Kernel Elevation of Privilege Vulnerability | 7.8 |
HIGH |
||
| Windows DCOM Server Security Feature Bypass | 6.5 |
MEDIUM |
||
| Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. | 6.5 |
MEDIUM |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861. | 7.5 |
HIGH |
||
| An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges. | 7.8 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8557, CVE-2018-8588. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8588. | 7.5 |
HIGH |
||
| A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. | 4.3 |
MEDIUM |
||
| A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557. | 7.5 |
HIGH |
||
| Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the warning, unsuspecting users unfamiliar with this new file type might run an unwanted executable. This also allows a WebExtension with the limited downloads.open permission to execute arbitrary code without user interaction on Windows 10 systems. *Note: this issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61. | 8.1 |
HIGH |
||
| An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. | 4.2 |
MEDIUM |
||
| An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. | 4.3 |
MEDIUM |
||
| A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8389, CVE-2018-8390. | 7.5 |
HIGH |
||
| Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. | 9.8 |
CRITICAL |
||
| An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0974, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0975. | 5.5 |
MEDIUM |
||
| An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0960, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974. | 5.5 |
MEDIUM |
||
| On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. | 7.2 |
HIGH |
||
| An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10. | 7.8 |
HIGH |
||
| A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018. | 9.8 |
CRITICAL |
||
| Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affected system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834. | 3.1 |
LOW |
||
| Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844. | 3.1 |
LOW |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11846, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11858, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to run arbitrary code in kernel mode, install programs, view, change or delete data, and create new accounts with full user rights due to improperly handing objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
| Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11851, and CVE-2017-11853. | 4.7 |
MEDIUM |
||
| Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windows kernel improperly initializing a memory address, aka "Windows Kernel Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11842, CVE-2017-11849, and CVE-2017-11851. | 5.5 |
MEDIUM |
||
| ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11836, CVE-2017-11837, CVE-2017-11838, CVE-2017-11839, CVE-2017-11840, CVE-2017-11841, CVE-2017-11843, CVE-2017-11846, CVE-2017-11859, CVE-2017-11861, CVE-2017-11862, CVE-2017-11866, CVE-2017-11869, CVE-2017-11870, CVE-2017-11871, and CVE-2017-11873. | 7.5 |
HIGH |
||
| Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user into loading a page containing malicious content, due to how the Edge Content Security Policy (CSP) validates documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11872 and CVE-2017-11874. | 6.1 |
MEDIUM |
||
| Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to run a specially crafted application and obtain information to further compromise the user's system due to the Windows kernel improperly initializing objects in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11831. | 4.7 |
MEDIUM |
||
| In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. | 7.8 |
HIGH |
||
| A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path. | 7.8 |
HIGH |
||
| Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flash Player for Internet Explorer 10 and 11 before 20.0.0.267, Adobe Flash Player for Linux before 11.2.202.559, AIR Desktop Runtime before 20.0.0.233, AIR SDK before 20.0.0.233, AIR SDK & Compiler before 20.0.0.233, AIR for Android before 20.0.0.233. | 9.8 |
CRITICAL |
||
| Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys. | 5.5 |
MEDIUM |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability". | 7.8 |
HIGH |
||
| Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows, and Microsoft Silverlight 5 when installed on Microsoft Windows allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Uniscribe Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8528. | 8.8 |
HIGH |
||
| The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8540 and CVE-2017-8541. | 7.8 |
HIGH |
||
| The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8542. | 5.5 |
MEDIUM |
||
| The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability", a different vulnerability than CVE-2017-8538 and CVE-2017-8540. | 7.8 |
HIGH |
||
| The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8539. | 5.5 |
MEDIUM |
||
| The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0259. | 4.7 |
MEDIUM |
||
| Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process. | 5.5 |
MEDIUM |
||
| A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." | 4.7 |
MEDIUM |
||
| An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability." | 7 |
HIGH |
||
| An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scripting Engine Memory Corruption Vulnerability." | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0163, CVE-2017-0180, and CVE-2017-0181. | 7.6 |
HIGH |
||
| A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0180, and CVE-2017-0181. | 7.6 |
HIGH |
||
| An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
| An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elevation of Privilege Vulnerability." | 8.1 |
HIGH |
||
| An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system, a.k.a. "Windows Kernel Information Disclosure Vulnerability." | 5.5 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Windows Server 2012 R2, and Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.4 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
| A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0181. | 7.6 |
HIGH |
||
| A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This CVE ID is unique from CVE-2017-0162, CVE-2017-0163, and CVE-2017-0180. | 7.6 |
HIGH |
||
| A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0183, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0184, CVE-2017-0185, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0185, and CVE-2017-0186. | 5.4 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0186. | 5.8 |
MEDIUM |
||
| A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability." This CVE ID is unique from CVE-2017-0178, CVE-2017-0179, CVE-2017-0182, CVE-2017-0183, CVE-2017-0184, and CVE-2017-0185. | 5.8 |
MEDIUM |
||
| A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189. | 3.3 |
LOW |
||
| An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188. | 7.8 |
HIGH |
||
| A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding, aka "Windows Denial of Service Vulnerability." | 5.8 |
MEDIUM |
||
| The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511, 1607, and 1703 allows an attacker to gain sensitive information via a specially crafted document or an untrusted website, aka "ATMFD.dll Information Disclosure Vulnerability." | 4.3 |
MEDIUM |
||
| An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE Elevation of Privilege Vulnerability." | 5.5 |
MEDIUM |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. Successful exploitation could lead to arbitrary code execution. | 7.8 |
HIGH |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution. | 9.8 |
CRITICAL |
||
| Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution. | 7.8 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082. | 7.8 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
| Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0097, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
| Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090. | 8.8 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0099. | 5.4 |
MEDIUM |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0138, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0141, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0150, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0151. | 7.5 |
HIGH |
||
| A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. This vulnerability is different from those described in CVE-2017-0010, CVE-2017-0015, CVE-2017-0032, CVE-2017-0035, CVE-2017-0067, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0141, and CVE-2017-0150. | 7.5 |
HIGH |
||
| Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system. | 8.8 |
HIGH |
||
| Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. | 9.8 |
CRITICAL |
||
| Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201. | 5.5 |
MEDIUM |
||
| GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component Information Disclosure Vulnerability," a different vulnerability than CVE-2016-0169. | 6.5 |
MEDIUM |
||
| GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics Component RCE Vulnerability." | 8.8 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0173, CVE-2016-0174, and CVE-2016-0196. | 7.8 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0174, and CVE-2016-0196. | 7.8 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0173, and CVE-2016-0196. | 7.8 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted application, aka "Win32k Information Disclosure Vulnerability." | 3.3 |
LOW |
||
| dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
| Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Shell Remote Code Execution Vulnerability." | 7.8 |
HIGH |
||
| The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles symbolic links, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
| The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0171, CVE-2016-0173, and CVE-2016-0174. | 7.8 |
HIGH |
||
| dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability." | 7.8 |
HIGH |
||
| Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted text property, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822. | 8.8 |
HIGH |
||
| Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability." | 9.3 |
CRITICAL |
||
| Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability." | 7.1 |
HIGH |
||
| Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability." | 7.1 |
HIGH |
||
| The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and memory corruption) via a malformed Cascading Style Sheets (CSS) token sequence in conjunction with modifications to HTML elements, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048 and CVE-2015-6049. | 8.1 |
HIGH |
||
| The WinVerifyTrust function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate PE file digests during Authenticode signature verification, which allows remote attackers to execute arbitrary code via a crafted PE file, aka "WinVerifyTrust Signature Validation Vulnerability." | 7.6 |
2024©
tesweb SA
