windows server 2016 · threatengine.sh

Home/Product/microsoft windows server 2016

Product

microsoft windows server 2016

500 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

< 10.0.14393.9140

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

< 10.0.14393.9140

Windows TCP/IP Denial of Service Vulnerability

< 10.0.14393.9140

Windows TCP/IP Denial of Service Vulnerability

< 10.0.14393.9140

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

< 10.0.14393.9140

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

< 10.0.14393.9140

Windows TCP/IP Denial of Service Vulnerability

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.14393.9140

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack

< 10.0.14393.9140

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker

< 10.0.14393.9140

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

< 10.0.14393.9140

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feat

< 10.0.14393.9140

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

< 10.0.14393.9140

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.14393.9140

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.14393.9140

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.14393.9140

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.14393.9140

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges l

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components al

< 10.0.14393.9140

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service loc

< 10.0.14393.9140

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.14393.9140

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.14393.9140

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.14393.9140

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

< 10.0.14393.9140

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9140

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver

< 10.0.14393.9140

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spo

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthoriz

< 10.0.14393.9060

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

< 10.0.14393.9060

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.9060

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.14393.9060

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

< 10.0.14393.9060

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker

< 10.0.14393.9060

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

< 10.0.14393.9060

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorize

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows

< 10.0.14393.9060

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

< 10.0.14393.9060

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.14393.9060

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System all

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows

< 10.0.14393.9060

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to discl

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.9060

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.9060

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.14393.9060

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.

< 10.0.14393.9060

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny ser

< 10.0.14393.9060

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.14393.9060

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

< 10.0.14393.9060

Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.9060

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over

< 10.0.14393.9060

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.14393.9060

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.14393.9060

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.14393.9060

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges loc

< 10.0.14393.9060

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

< 10.0.14393.9060

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows

< 10.0.14393.9060

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileg

< 10.0.14393.9060

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges lo

< 10.0.14393.9060

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges loc

< 10.0.14393.9060

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allow

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.14393.9060

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.14393.9060

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.14393.9060

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.9060

Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges l

< 10.0.14393.9060

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate

< 10.0.14393.9060

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate

< 10.0.14393.9060

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

< 10.0.14393.9060

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

< 10.0.14393.9060

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

< 10.0.14393.9060

Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges lo

< 10.0.14393.9060

Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over

< 10.0.14393.9060

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a sec

< 10.0.14393.9060

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized

< 10.0.14393.9060

Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feat

< 10.0.14393.8957

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.14393.8957

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally.

< 10.0.14393.8957

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent net

< 10.0.14393.8957

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges loc

< 10.0.14393.8957

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an author

< 10.0.14393.8957

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to per

< 10.0.14393.8957

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

< 10.0.14393.8957

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

< 10.0.14393.8957

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to e

< 10.0.14393.8957

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to e

< 10.0.14393.8957

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

< 10.0.14393.8957

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.14393.8957

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.14393.8957

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

< 10.0.14393.8957

Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

< 10.0.14393.8957

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.

< 10.0.14393.8957

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthor

< 10.0.14393.8957

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service

< 10.0.14393.8957

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service

< 10.0.14393.8957

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized

< 10.0.14393.8957

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over

< 10.0.14393.8957

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8957

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

< 10.0.14393.8957

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Dr

< 10.0.14393.8957

Use after free in RPC Runtime allows an authorized attacker to execute code over a network.

< 10.0.14393.8957

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.14393.8868

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

< 10.0.14393.8868

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate p

< 10.0.14393.8868

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.8868

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.8868

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

< 10.0.14393.8868

Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

< 10.0.14393.8868

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.14393.8868

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.14393.8868

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.14393.8868

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

< 10.0.14393.8868

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges lo

< 10.0.14393.8868

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8868

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized

< 10.0.14393.8868

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.14393.8868

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

< 10.0.14393.8783

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration,

< 10.0.14393.8783

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.8783

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.8783

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adj

< 10.0.14393.8783

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.14393.8783

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny ser

< 10.0.14393.8783

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM)

< 10.0.14393.8783

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8783

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.14393.8783

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8783

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

< 10.0.14393.8783

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over

< 10.0.14393.8783

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

< 10.0.14393.8783

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges lo

< 10.0.14393.8783

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.14393.8783

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.14393.8783

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

< 10.0.14393.8783

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally

< 10.0.14393.8783

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

< 10.0.14393.8783

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker t

< 10.0.14393.8783

Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a phy

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorize

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWIN

< 10.0.14393.8783

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.14393.8783

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to dis

< 10.0.14393.8783

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8783

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally

< 10.0.14393.8783

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally

< 10.0.14393.8783

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.14393.8783

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tamperi

< 10.0.14393.8783

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges loc

< 10.0.14393.8783

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose in

< 10.0.14393.8783

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

< 10.0.14393.8783

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.14393.8519

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8688

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized

< 10.0.14393.8688

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.

< 10.0.14393.8688

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code

< 10.0.14393.8688

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.14393.8688

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges loca

< 10.0.14393.8688

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8688

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized a

< 10.0.14393.8594

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8594

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.14393.8594

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.14393.8519

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.14393.8594

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8594

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges

< 10.0.14393.8594

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8594

Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.

< 10.0.14393.8594

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privile

< 10.0.14393.8594

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

< 10.0.14393.8594

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

< 10.0.14393.8594

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

< 10.0.14393.8594

Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8594

Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.

< 10.0.14393.8594

Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges loca

< 10.0.14393.8594

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an autho

< 10.0.14393.8594

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized

< 10.0.14393.8594

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized

< 10.0.14393.8594

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorize

< 10.0.14393.8594

Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose inf

< 10.0.14393.8524

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unautho

<= 10.0.14393.8519

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

< 10.0.14393.8519

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.14393.8519

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.14393.8519

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attac

<= 10.0.14393.8519

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

<= 10.0.14393.8519

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclo

<= 10.0.14393.8519

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

<= 10.0.14393.8519

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

<= 10.0.14393.8519

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges lo

<= 10.0.14393.8519

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

<= 10.0.14393.8519

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

<= 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

<= 10.0.14393.8519

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose informat

<= 10.0.14393.8519

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows

< 10.0.14393.8519

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

<= 10.0.14393.8519

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information loca

<= 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

<= 10.0.14393.8519

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.

< 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose i

< 10.0.14393.8519

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

<= 10.0.14393.8519

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

<= 10.0.14393.8519

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.14393.8519

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.14393.8519

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

<= 10.0.14393.8519

Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

<= 10.0.14393.8519

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

<= 10.0.14393.8519

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

<= 10.0.14393.8519

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

<= 10.0.14393.8519

Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

<= 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.14393.8519

Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.

< 10.0.14393.8519

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS

< 10.0.14393.8519

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

<= 10.0.14393.8519

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8519

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physica

< 10.0.14393.8519

Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

< 10.0.14393.8519

Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with

< 10.0.14393.8519

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.14393.8519

Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

<= 10.0.14393.8519

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

<= 10.0.14393.8519

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating s

<= 10.0.14393.8519

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating s

< 10.0.14393.8422

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vuln

< 10.0.14393.8422

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.14393.8422

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.14393.8422

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

< 10.0.14393.8422

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.8422

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSett

< 10.0.14393.8422

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

< 10.0.14393.8422

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform

< 10.0.14393.8422

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8422

Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over

< 10.0.14393.8422

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.

< 10.0.14393.8422

Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges l

< 10.0.14393.8422

Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.14393.8422

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.14393.8422

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker t

< 10.0.14393.8422

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.14393.8422

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.14393.8422

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose informati

< 10.0.14393.8422

Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8422

Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

< 10.0.14393.8422

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.14393.8422

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.14393.8422

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.14393.8422

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate

< 10.0.14393.8416

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthori

< 10.0.14393.8246

Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8066

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over

< 10.0.14393.8246

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges lo

< 10.0.14393.8330

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

< 10.0.14393.8330

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.14393.8330

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a networ

< 10.0.14393.8330

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

< 10.0.14393.8330

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locall

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute

< 10.0.14393.8330

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.14393.8330

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose infor

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorize

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.14393.8330

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8330

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorize

< 10.0.14393.8330

Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose informatio

< 10.0.14393.8330

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8330

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8330

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8330

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.14393.8330

Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose information locally.

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose inform

< 10.0.14393.8330

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to eleva

< 10.0.14393.8330

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

< 10.0.14393.8330

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.14393.8330

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8330

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

< 10.0.14393.8330

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

< 10.0.14393.8246

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute co

< 10.0.14393.8246

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

< 10.0.14393.8246

Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.14393.8148

Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8246

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate priv

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjace

< 10.0.14393.8246

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

< 10.0.14393.8246

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.14393.8246

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

< 10.0.14393.8246

Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

< 10.0.14393.8246

Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.

< 10.0.14393.8246

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.

< 10.0.14393.8246

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

< 10.0.14393.8246

Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to de

< 10.0.14393.8246

Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthori

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.

< 10.0.14393.8246

Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authoriz

< 10.0.14393.8246

Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacke

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges

< 10.0.14393.8246

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

< 10.0.14393.8246

Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.14393.8246

Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network.

< 10.0.14393.8246

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

< 10.0.14393.8246

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an a

< 10.0.14393.8246

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to

< 10.0.14393.8246

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized atta

< 10.0.14393.8246

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security featur

< 10.0.14393.8246

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin