windows server 2025 · threatengine.sh

Home/Product/microsoft windows server 2025

Product

microsoft windows server 2025

500 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

< 10.0.26100.32860

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32860

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature l

< 10.0.26100.32772

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32772

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32772

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.26100.32772

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32772

Windows TCP/IP Denial of Service Vulnerability

< 10.0.26100.32772

Windows TCP/IP Denial of Service Vulnerability

< 10.0.26100.32772

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

< 10.0.26100.32772

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

< 10.0.26100.32772

Windows TCP/IP Denial of Service Vulnerability

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.26100.32772

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack

< 10.0.26100.32772

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker

< 10.0.26100.32772

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

< 10.0.26100.32772

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feat

< 10.0.26100.32772

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

< 10.0.26100.32772

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.26100.32772

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.26100.32772

Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.

< 10.0.26100.32772

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.26100.32772

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.26100.32772

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges l

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components al

< 10.0.26100.32772

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service loc

< 10.0.26100.32772

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.26100.32772

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.26100.32772

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.26100.32772

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.26100.32772

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

< 10.0.26100.32772

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32772

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver

< 10.0.26100.32860

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spo

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthoriz

< 10.0.26100.32690

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

< 10.0.26100.32690

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an aut

< 10.0.26100.32690

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

< 10.0.26100.32690

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.26100.32690

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attac

< 10.0.26100.32690

Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

< 10.0.26100.32690

Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security

< 10.0.26100.32690

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.26100.32690

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.26100.32690

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.26100.32690

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

< 10.0.26100.32690

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker

< 10.0.26100.32690

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

< 10.0.26100.32690

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorize

< 10.0.26100.32690

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

< 10.0.26100.32690

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows

< 10.0.26100.32690

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges loc

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.26100.32690

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32690

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.

< 10.0.26100.32690

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.26100.32690

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System all

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows

< 10.0.26100.32690

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an

< 10.0.26100.32690

Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.d

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to discl

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32690

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32690

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.26100.32690

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.

< 10.0.26100.32690

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny ser

< 10.0.26100.32690

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

< 10.0.26100.32690

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

< 10.0.26100.32690

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

< 10.0.26100.32690

Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allow

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Dri

< 10.0.26100.32690

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over

< 10.0.26100.32690

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized

< 10.0.26100.32690

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.26100.32690

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privi

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized

< 10.0.26100.32690

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges loc

< 10.0.26100.32690

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows

< 10.0.26100.32690

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileg

< 10.0.26100.32690

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges lo

< 10.0.26100.32690

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges lo

< 10.0.26100.32690

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges loc

< 10.0.26100.32690

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allow

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.26100.32690

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows a

< 10.0.26100.32690

Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges l

< 10.0.26100.32690

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate

< 10.0.26100.32690

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate

< 10.0.26100.32690

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

< 10.0.26100.32690

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

< 10.0.26100.32690

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

< 10.0.26100.32690

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32690

Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges lo

< 10.0.26100.32690

Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerf

< 10.0.26100.32690

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a sec

< 10.0.26100.32690

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32690

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized

< 10.0.26100.32690

Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information

< 10.0.26100.32463

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32522

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.26100.32463

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally.

< 10.0.26100.32463

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent net

< 10.0.26100.32463

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges loc

< 10.0.26100.32463

Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an author

< 10.0.26100.32463

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to per

< 10.0.26100.32463

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

< 10.0.26100.32463

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

< 10.0.26100.32463

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to e

< 10.0.26100.32463

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to e

< 10.0.26100.32463

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

< 10.0.26100.32463

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.26100.32463

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code o

< 10.0.26100.32463

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

< 10.0.26100.32463

Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.

< 10.0.26100.32463

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

< 10.0.26100.32463

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service

< 10.0.26100.32463

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service

< 10.0.26100.32463

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

< 10.0.26100.32463

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized

< 10.0.26100.32463

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over

< 10.0.26100.32463

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32463

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

< 10.0.26100.32463

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Dr

< 10.0.26100.32463

Use after free in RPC Runtime allows an authorized attacker to execute code over a network.

< 10.0.26100.32313

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

< 10.0.26100.32313

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate p

< 10.0.26100.32313

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.26100.32313

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

< 10.0.26100.32313

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

< 10.0.26100.32313

Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

< 10.0.26100.32313

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.26100.32313

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.26100.32313

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

< 10.0.26100.32313

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service o

< 10.0.26100.32313

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

< 10.0.26100.32313

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows

< 10.0.26100.32313

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges lo

< 10.0.26100.32313

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform

< 10.0.26100.32313

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32313

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized

< 10.0.26100.32313

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

< 10.0.26100.32313

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

< 10.0.26100.32230

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration,

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Servic

< 10.0.26100.32230

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose informatio

< 10.0.26100.32230

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32230

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32230

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adj

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.26100.32230

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privile

< 10.0.26100.32230

Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny ser

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

< 10.0.26100.32230

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM)

< 10.0.26100.32230

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges loca

< 10.0.26100.32230

Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclos

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

< 10.0.26100.32230

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorize

< 10.0.26100.32230

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locall

< 10.0.26100.32230

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

< 10.0.26100.32230

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a

< 10.0.26100.32230

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

< 10.0.26100.32230

Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locall

< 10.0.26100.32230

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a

< 10.0.26100.7623

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an author

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over

< 10.0.26100.32230

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally.

< 10.0.26100.32230

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges lo

< 10.0.26100.32230

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

< 10.0.26100.32230

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally

< 10.0.26100.32230

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose informati

< 10.0.26100.32230

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.26100.32230

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.

< 10.0.26100.32230

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

< 10.0.26100.32230

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally

< 10.0.26100.32230

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

< 10.0.26100.32230

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker t

< 10.0.26100.7623

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Servic

< 10.0.26100.32230

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

< 10.0.26100.32230

Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a phy

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorize

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWIN

< 10.0.26100.32230

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

< 10.0.26100.32230

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose info

< 10.0.26100.32230

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

< 10.0.26100.32230

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to dis

< 10.0.26100.32230

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7623

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally

< 10.0.26100.32230

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate pr

< 10.0.26100.32230

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Servic

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorize

< 10.0.26100.32230

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tamperi

< 10.0.26100.32230

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate p

< 10.0.26100.32230

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges loc

< 10.0.26100.32230

Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows a

< 10.0.26100.7623

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose in

< 10.0.26100.32230

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

< 10.0.26100.32230

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.

< 10.0.26100.6899

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code ove

< 10.0.26100.7392

Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclo

< 10.0.26100.7392

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized

< 10.0.26100.7392

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized

< 10.0.26100.7392

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally.

< 10.0.26100.7392

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.

< 10.0.26100.7392

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code

< 10.0.26100.7392

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over

< 10.0.26100.7392

Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges loca

< 10.0.26100.7392

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System all

< 10.0.26100.7392

Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

< 10.0.26100.7392

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.

< 10.0.26100.7392

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.

< 10.0.26100.7392

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.

< 10.0.26100.7392

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7392

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc

< 10.0.26100.7392

Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7456

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized a

< 10.0.26100.7092

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver f

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized

< 10.0.26100.7092

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.26100.6899

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information

< 10.0.26100.7092

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorize

< 10.0.26100.7092

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges

< 10.0.26100.7092

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over

< 10.0.26100.7092

Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privile

< 10.0.26100.7392

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to

< 10.0.26100.7092

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

< 10.0.26100.7092

Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

< 10.0.26100.7092

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

< 10.0.26100.7092

Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Out-of-bounds read in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to disclose information locally.

< 10.0.26100.7092

Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges loca

< 10.0.26100.7092

External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.7092

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an autho

< 10.0.26100.7092

Insertion of sensitive information into sent data in Windows Speech allows an authorized attacker to disclose information locally.

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized

< 10.0.26100.7092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorize

< 10.0.26100.7092

Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6508

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

<= 10.0.26100.6899

Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.

< 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose inf

< 10.0.26100.6508

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6508

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6905

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

< 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing loc

< 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unautho

<= 10.0.26100.6899

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

< 10.0.26100.6899

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.26100.6899

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

< 10.0.26100.6899

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileg

<= 10.0.26100.6899

Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privile

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attac

<= 10.0.26100.6899

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

<= 10.0.26100.6899

Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclo

<= 10.0.26100.6899

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

<= 10.0.26100.6899

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

<= 10.0.26100.6899

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

<= 10.0.26100.6899

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges lo

<= 10.0.26100.6899

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

<= 10.0.26100.6899

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disc

<= 10.0.26100.6899

Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.

<= 10.0.26100.6899

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

<= 10.0.26100.6899

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information locally.

<= 10.0.26100.6899

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose informat

<= 10.0.26100.6899

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows

< 10.0.26100.6899

Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.

<= 10.0.26100.6899

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information loca

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an auth

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows

<= 10.0.26100.6899

Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows

<= 10.0.26100.6899

Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges loca

<= 10.0.26100.6899

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.

<= 10.0.26100.6899

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

< 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose i

< 10.0.26100.6899

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

<= 10.0.26100.6899

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spo

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

<= 10.0.26100.6899

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

< 10.0.26100.6899

Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

<= 10.0.26100.6899

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform

<= 10.0.26100.6899

Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

<= 10.0.26100.6899

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to di

< 10.0.26100.6899

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

<= 10.0.26100.6899

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

<= 10.0.26100.6899

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges local

<= 10.0.26100.6899

Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ove

<= 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

<= 10.0.26100.6899

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.

< 10.0.26100.6899

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to

< 10.0.26100.6899

Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.

< 10.0.26100.6899

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

< 10.0.26100.6899

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

<= 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information

< 10.0.26100.6899

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with

< 10.0.26100.6899

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

< 10.0.26100.6899

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to eleva

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin