windows 11 22h2 · threatengine.sh

Home/Product/microsoft windows 11 22h2

Product

microsoft windows 11 22h2

500 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

< 10.0.22621.6060

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.22621.6060

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.22621.5909

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

< 10.0.22621.6060

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose inf

< 10.0.22621.5909

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing loc

<= 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unautho

< 10.0.22621.6060

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

< 10.0.22621.6060

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.22621.6060

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.22621.6060

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.22621.6060

Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privile

< 10.0.22621.6060

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

< 10.0.22621.6060

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

< 10.0.22621.6060

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

< 10.0.22621.6060

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges lo

< 10.0.22621.6060

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

< 10.0.22621.6060

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

< 10.0.22621.6060

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.22621.6060

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.

< 10.0.22621.6060

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose informat

< 10.0.22621.6060

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows

< 10.0.22621.6060

Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

< 10.0.22621.6060

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information loca

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.22621.6060

Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.22621.6060

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges loca

< 10.0.22621.6060

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.

< 10.0.22621.6060

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.22621.6060

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

< 10.0.22621.6060

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform

< 10.0.22621.6060

Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.6060

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to di

< 10.0.22621.6060

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

< 10.0.22621.6060

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.6060

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

< 10.0.22621.6060

Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.22621.6060

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to

< 10.0.22621.6060

Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.

< 10.0.22621.6060

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS

< 10.0.22621.6060

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to eleva

< 10.0.22621.6060

Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.

< 10.0.22621.6060

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.

< 10.0.22621.6060

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physica

< 10.0.22621.6060

Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker

< 10.0.22621.6060

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.6060

Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.

< 10.0.22621.6060

Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with

< 10.0.22621.6060

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with

< 10.0.22621.6060

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with

< 10.0.22621.6060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.22621.6060

Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a network.

< 10.0.22621.6060

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.6060

Use after free in Xbox allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized at

< 10.0.22621.6060

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature loca

< 10.0.22621.6060

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.6060

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.

< 10.0.22621.6060

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.6060

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

< 10.0.22621.6060

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating s

< 10.0.22621.6060

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating s

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an

< 10.0.22621.5909

Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.

< 10.0.22621.5909

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vuln

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.22621.5909

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.5909

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.22621.5909

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSett

< 10.0.22621.5909

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

< 10.0.22621.5909

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform

< 10.0.22621.5909

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5909

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.

< 10.0.22621.5909

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges l

< 10.0.22621.5909

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.22621.5909

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.22621.5909

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.22621.5909

Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

< 10.0.22621.5909

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.22621.5909

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose informati

< 10.0.22621.5909

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5909

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

< 10.0.22621.5909

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate

< 10.0.22621.5624

Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over

< 10.0.22621.5624

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges lo

< 10.0.22621.5768

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.5768

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.22621.5768

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a networ

< 10.0.22621.5768

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny servi

< 10.0.22621.5768

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.22621.5768

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

< 10.0.22621.5768

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locall

< 10.0.22621.5768

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.22621.5768

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.22621.5768

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose infor

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorize

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.22621.5768

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5768

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code loc

< 10.0.22621.5768

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a netwo

< 10.0.22621.5768

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacke

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate p

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.22621.5768

Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose informatio

< 10.0.22621.5768

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.

< 10.0.22621.5768

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.22621.5768

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

< 10.0.22621.5768

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.22621.5768

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5768

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

< 10.0.22621.5768

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.22621.5624

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute co

< 10.0.22621.5624

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.

< 10.0.22621.5624

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

< 10.0.22621.5624

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.22621.5624

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate priv

< 10.0.22621.5624

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5624

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.

< 10.0.22621.5624

Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjace

< 10.0.22621.5624

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5624

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.22621.5624

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Servic

< 10.0.22621.5624

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5624

Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.

< 10.0.22621.5624

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.

< 10.0.22621.5624

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to de

< 10.0.22621.5624

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authoriz

< 10.0.22621.5624

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacke

< 10.0.22621.5624

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges

< 10.0.22621.5624

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.

< 10.0.22621.5624

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network.

< 10.0.22621.5624

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

< 10.0.22621.5624

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an a

< 10.0.22621.5624

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to

< 10.0.22621.5624

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized atta

< 10.0.22621.5624

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security featur

< 10.0.22621.5624

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5624

Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Access of resource using incompatible type ('type confusion') in Windows SSDP Service allows an authorized attacker to elevate pri

< 10.0.22621.5624

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass

< 10.0.22621.5624

Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevat

< 10.0.22621.5624

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.22621.5624

Use after free in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.

< 10.0.22621.5624

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.

< 10.0.22621.5624

Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a securit

< 10.0.22621.5624

Missing support for integrity check in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevat

< 10.0.22621.5624

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

< 10.0.22621.5624

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical att

< 10.0.22621.5624

Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate

< 10.0.22621.5624

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical att

< 10.0.22621.5624

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security featur

< 10.0.22621.5624

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

< 10.0.22621.5624

Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally

< 10.0.22621.5624

Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

< 10.0.22621.5624

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5624

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclos

< 10.0.22621.5624

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5624

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5624

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME)

< 10.0.22621.5624

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5624

Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privi

< 10.0.22621.5624

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over

< 10.0.22621.5335

Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose information

< 10.0.22621.5335

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges loca

< 10.0.22621.5472

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.22621.5472

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privi

< 10.0.22621.5472

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.5472

Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.

< 10.0.22621.5472

Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

< 10.0.22621.5472

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.

< 10.0.22621.5472

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5472

Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to

< 10.0.22621.5472

Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5472

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

< 10.0.22621.5472

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5472

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5472

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5472

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute co

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.5472

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

< 10.0.22621.6060

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signatu

< 10.0.22621.5335

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.22621.5335

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to exe

< 10.0.22621.5335

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

< 10.0.22621.5335

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent

< 10.0.22621.5335

Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.

< 10.0.22621.5335

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a net

< 10.0.22621.5335

Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5335

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5335

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose info

< 10.0.22621.5335

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose info

< 10.0.22621.5335

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.

< 10.0.22621.5335

Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.

< 10.0.22621.5335

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny

< 10.0.22621.5335

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature o

< 10.0.22621.5335

Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service

< 10.0.22621.5335

Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5335

Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.

< 10.0.22621.5335

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose info

< 10.0.22621.5335

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5335

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5335

Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code l

< 10.0.22621.5335

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5335

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose info

< 10.0.22621.5335

Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information lo

< 10.0.22621.5335

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5335

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.5189

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

< 10.0.22621.5189

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

< 10.0.22621.5189

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a netwo

< 10.0.22621.5189

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.

< 10.0.22621.5189

Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker t

< 10.0.22621.5189

Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacke

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges lo

< 10.0.22621.5189

Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Use after free in Windows Shell allows an unauthorized attacker to execute code locally.

< 10.0.22621.5189

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privi

< 10.0.22621.5189

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an au

< 10.0.22621.5189

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized atta

< 10.0.22621.5189

Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5189

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges loc

< 10.0.22621.5189

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service

< 10.0.22621.5189

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny

< 10.0.22621.5189

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a networ

< 10.0.22621.5189

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security featur

< 10.0.22621.5189

Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

< 10.0.22621.5189

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny

< 10.0.22621.5189

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.22621.5189

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a netw

< 10.0.22621.5189

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.22621.5189

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.22621.5189

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges loc

< 10.0.22621.5189

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a netw

< 10.0.22621.5189

Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a n

< 10.0.22621.5189

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an au

< 10.0.22621.5189

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows a

< 10.0.22621.5189

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network

< 10.0.22621.5189

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical att

< 10.0.22621.5189

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.

< 10.0.22621.5189

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5189

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5189

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate pr

< 10.0.22621.5189

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the a

< 10.0.22621.5189

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to eleva

< 10.0.22621.5039

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

< 10.0.22621.4890

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

< 10.0.22621.5039

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

< 10.0.22621.5039

Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

< 10.0.22621.5039

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.22621.5039

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locall

< 10.0.22621.5039

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

< 10.0.22621.5039

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

< 10.0.22621.5039

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

< 10.0.22621.5039

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

< 10.0.22621.5039

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

< 10.0.22621.5039

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

< 10.0.22621.5039

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a ph

< 10.0.22621.5039

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

< 10.0.22621.5039

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locall

< 10.0.22621.5039

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privi

< 10.0.22621.5039

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

< 10.0.22621.5039

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

< 10.0.22621.5039

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.22621.5039

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.22621.5039

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

< 10.0.22621.5039

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute c

< 10.0.22621.5039

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over

< 10.0.22621.5039

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

< 10.0.22621.4890

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Core Messaging Elevation of Privileges Vulnerability

< 10.0.22621.4890

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Storage Elevation of Privilege Vulnerability

< 10.0.22621.4890

NTLM Hash Disclosure Spoofing Vulnerability

< 10.0.22621.4890

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

< 10.0.22621.4890

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Installer Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4890

Microsoft Digest Authentication Remote Code Execution Vulnerability

< 10.0.22621.4890

Microsoft Digest Authentication Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

< 10.0.22621.4890

Windows Kernel Security Feature Bypass Vulnerability

< 10.0.22621.4890

Windows Core Messaging Elevation of Privileges Vulnerability

< 10.0.22621.4890

Internet Connection Sharing (ICS) Denial of Service Vulnerability

< 10.0.22621.4890

Windows Active Directory Domain Services API Denial of Service Vulnerability

< 10.0.22621.4890

Windows Kerberos Denial of Service Vulnerability

< 10.0.22621.4890

Windows Remote Desktop Configuration Service Tampering Vulnerability

< 10.0.22621.4890

Windows Deployment Services Denial of Service Vulnerability

< 10.0.22621.4890

Windows NTFS Elevation of Privilege Vulnerability

< 10.0.22621.4890

Internet Connection Sharing (ICS) Denial of Service Vulnerability

< 10.0.22621.4890

Internet Connection Sharing (ICS) Denial of Service Vulnerability

< 10.0.22621.4890

Internet Connection Sharing (ICS) Denial of Service Vulnerability

< 10.0.22621.4890

Windows Telephony Server Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4890

Windows Core Messaging Elevation of Privileges Vulnerability

< 10.0.22621.4890

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

< 10.0.22621.4751

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4751

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4751

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4751

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4751

Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny se

< 10.0.22621.4751

Windows Graphics Component Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows CSC Service Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows CSC Service Information Disclosure Vulnerability

< 10.0.22621.4751

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Web Threat Defense User Service Information Disclosure Vulnerability

< 10.0.22621.4751

Windows Digital Media Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

< 10.0.22621.4751

Windows Telephony Service Remote Code Execution Vulnerability

< 10.0.22621.4751

GDI+ Remote Code Execution Vulnerability

< 10.0.22621.4751

Windows Cryptographic Information Disclosure Vulnerability

< 10.0.22621.4751

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

< 10.0.22621.4751

MapUrlToZone Security Feature Bypass Vulnerability

< 10.0.22621.4751

Windows Installer Elevation of Privilege Vulnerability

< 10.0.22621.4751

Windows Remote Desktop Services Denial of Service Vulnerability

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin