Skip to main content

Windows 11

495 CVEs product

Monthly

CVE-2022-24533 Apr 15, 19:15 HIGH This Week

Remote Desktop Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.0
EPSS
5.3%
CVE-2022-24530 Apr 15, 19:15 HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-24528 Apr 15, 19:15 HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.4%
CVE-2022-24500 Apr 15, 19:15 HIGH This Week

Windows SMB Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
38.0%
CVE-2022-24499 Apr 15, 19:15 HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2022-24498 Apr 15, 19:15 MEDIUM This Month

Windows iSCSI Target Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
6.5
EPSS
2.3%
CVE-2022-24497 Apr 15, 19:15 CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
9.8
EPSS
34.6%
CVE-2022-24496 Apr 15, 19:15 HIGH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-24495 Apr 15, 19:15 HIGH This Week

Windows Direct Show Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.0
EPSS
1.3%
CVE-2022-24494 Apr 15, 19:15 HIGH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24493 Apr 15, 19:15 MEDIUM This Month

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
0.8%
CVE-2022-24492 Apr 15, 19:15 HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.9%
CVE-2022-24491 Apr 15, 19:15 CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
9.8
EPSS
33.5%
CVE-2022-24488 Apr 15, 19:15 HIGH This Week

Windows Desktop Bridge Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-24487 Apr 15, 19:15 HIGH This Week

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
8.8
EPSS
2.1%
CVE-2022-24486 Apr 15, 19:15 HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-24485 Apr 15, 19:15 HIGH This Week

Win32 File Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
1.6%
CVE-2022-24483 Apr 15, 19:15 MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
5.5
EPSS
2.1%
CVE-2022-24482 Apr 15, 19:15 HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +3
NVD
CVSS 3.1
7.0
EPSS
0.3%
CVE-2022-24481 Apr 15, 19:15 HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
17.1%
CVE-2022-24479 Apr 15, 19:15 HIGH This Week

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2022-24474 Apr 15, 19:15 HIGH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
6.7%
CVE-2022-23268 Apr 15, 19:15 MEDIUM This Month

Windows Hyper-V Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2022 Windows 11
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-23257 Apr 15, 19:15 HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2022-22009 Apr 15, 19:15 HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-22008 Apr 15, 19:15 HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Race Condition Microsoft Windows Server 2012 Windows Server 2016 +5
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-21983 Apr 15, 19:15 HIGH This Week

Win32 Stream Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
1.9%
CVE-2022-24525 Mar 09, 17:15 HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows 10 Windows Server +1
NVD
CVSS 3.1
7.0
EPSS
0.4%
CVE-2022-24508 Mar 09, 17:15 HIGH This Week

Win32 File Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2022 Windows 10 Windows Server +1
NVD
CVSS 3.1
8.8
EPSS
2.6%
CVE-2022-24507 Mar 09, 17:15 HIGH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +3
NVD
CVSS 3.1
7.8
EPSS
3.9%
CVE-2022-24505 Mar 09, 17:15 HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +4
NVD
CVSS 3.1
7.0
EPSS
0.3%
CVE-2022-24503 Mar 09, 17:15 MEDIUM This Month

Remote Desktop Protocol Client Information Disclosure Vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Remote Desktop Client Windows Server 2008 Windows Server 2012 +9
NVD
CVSS 3.1
5.4
EPSS
2.3%
CVE-2022-24502 Mar 09, 17:15 MEDIUM This Month

Windows HTML Platforms Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +8
NVD
CVSS 3.1
4.3
EPSS
33.1%
CVE-2022-24460 Mar 09, 17:15 HIGH This Week

Tablet Windows User Interface Application Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
7.0
EPSS
1.9%
CVE-2022-24459 Mar 09, 17:15 HIGH This Week

Windows Fax and Scan Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-24454 Mar 09, 17:15 HIGH This Week

Windows Security Support Provider Interface Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23299 Mar 09, 17:15 HIGH This Week

Windows PDEV Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
7.6%
CVE-2022-23298 Mar 09, 17:15 HIGH This Week

Windows NT OS Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.0
EPSS
0.6%
CVE-2022-23297 Mar 09, 17:15 MEDIUM This Month

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
0.7%
CVE-2022-23296 Mar 09, 17:15 HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23294 Mar 09, 17:15 HIGH This Week

Windows Event Tracing Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-23293 Mar 09, 17:15 HIGH This Week

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23291 Mar 09, 17:15 HIGH This Week

Windows DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 Windows 10 Windows Server +1
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23290 Mar 09, 17:15 HIGH This Week

Windows Inking COM Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23287 Mar 09, 17:15 HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
7.0
EPSS
0.6%
CVE-2022-23286 Mar 09, 17:15 HIGH This Week

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 Windows 10 Windows Server +1
NVD
CVSS 3.1
7.0
EPSS
4.3%
CVE-2022-23284 Mar 09, 17:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
7.2
EPSS
3.1%
CVE-2022-23283 Mar 09, 17:15 HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
7.0
EPSS
0.4%
CVE-2022-23281 Mar 09, 17:15 MEDIUM This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
1.1%
CVE-2022-23253 Mar 09, 17:15 MEDIUM This Month

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
6.5
EPSS
56.4%
CVE-2022-22010 Mar 09, 17:15 MEDIUM This Month

Media Foundation Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
4.4
EPSS
2.4%
CVE-2022-21990 Mar 09, 17:15 HIGH This Week

Remote Desktop Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
18.8%
CVE-2022-21977 Mar 09, 17:15 LOW Monitor

Media Foundation Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +6
NVD
CVSS 3.1
3.3
EPSS
2.4%
CVE-2022-21967 Mar 09, 17:15 HIGH This Week

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows 10 Windows 11
NVD
CVSS 3.1
7.0
EPSS
0.7%
CVE-2021-43893 Dec 15, 15:15 HIGH PATCH This Week

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
6.6%
CVE-2021-43883 Dec 15, 15:15 HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
12.0%
CVE-2021-43880 Dec 15, 15:15 MEDIUM PATCH This Month

Windows Mobile Device Management Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 11
NVD
CVSS 3.1
5.5
EPSS
0.7%
CVE-2021-43248 Dec 15, 15:15 HIGH PATCH This Week

Windows Digital Media Receiver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-43247 Dec 15, 15:15 HIGH PATCH This Week

Windows TCP/IP Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Windows Server 2016 Windows Server 2019 +3
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2021-43240 Dec 15, 15:15 HIGH PATCH This Week

NTFS Set Short Name Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows 10 Windows Server +1
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-43239 Dec 15, 15:15 HIGH PATCH This Week

Windows Recovery Environment Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows 10 Windows Server +1
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-43238 Dec 15, 15:15 HIGH PATCH This Week

Windows Remote Access Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2021-43237 Dec 15, 15:15 HIGH PATCH This Week

Windows Setup Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows 10 Windows Server +1
NVD
CVSS 3.1
7.3
EPSS
1.0%
CVE-2021-43236 Dec 15, 15:15 HIGH PATCH This Week

Microsoft Message Queuing Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
3.0%
CVE-2021-43235 Dec 15, 15:15 MEDIUM PATCH This Month

Storage Spaces Controller Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
5.5
EPSS
0.8%
CVE-2021-43234 Dec 15, 15:15 HIGH PATCH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2021-43233 Dec 15, 15:15 HIGH PATCH This Week

Remote Desktop Client Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
2.2%
CVE-2021-43232 Dec 15, 15:15 HIGH PATCH This Week

Windows Event Tracing Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2021-43231 Dec 15, 15:15 HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2021-43230 Dec 15, 15:15 HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-43229 Dec 15, 15:15 HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2021-43228 Dec 15, 15:15 HIGH PATCH This Week

SymCrypt Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
7.5
EPSS
3.7%
CVE-2021-43227 Dec 15, 15:15 MEDIUM PATCH This Month

Storage Spaces Controller Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
5.5
EPSS
0.8%
CVE-2021-43224 Dec 15, 15:15 MEDIUM PATCH This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
3.9%
CVE-2021-43222 Dec 15, 15:15 HIGH PATCH This Week

Microsoft Message Queuing Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
3.0%
CVE-2021-43219 Dec 15, 15:15 HIGH PATCH This Week

DirectX Graphics Kernel File Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +2
NVD
CVSS 3.1
7.5
EPSS
3.7%
CVE-2021-43217 Dec 15, 15:15 CRITICAL PATCH Act Now

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
9.8
EPSS
6.4%
CVE-2021-43216 Dec 15, 15:15 MEDIUM PATCH This Month

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
6.5
EPSS
3.2%
CVE-2021-43215 Dec 15, 15:15 CRITICAL PATCH Act Now

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft Windows Server 2008 +9
NVD
CVSS 3.1
9.8
EPSS
2.7%
CVE-2021-43207 Dec 15, 15:15 HIGH PATCH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-41333 Dec 15, 15:15 HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2021-42285 Nov 10, 01:19 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +8
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-42284 Nov 10, 01:19 MEDIUM PATCH This Month

Windows Hyper-V Denial of Service Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD VulDB
CVSS 3.1
6.8
EPSS
3.4%
CVE-2021-42283 Nov 10, 01:19 HIGH PATCH This Week

NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD VulDB
CVSS 3.1
8.8
EPSS
0.4%
CVE-2021-42280 Nov 10, 01:19 MEDIUM PATCH This Month

Windows Feedback Hub Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD VulDB
CVSS 3.1
5.5
EPSS
0.9%
CVE-2021-42279 Nov 10, 01:19 NuGet MEDIUM PATCH This Month

Chakra Scripting Engine Memory Corruption Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Windows Server 2016 Windows Server 2019 +3
NVD VulDB
CVSS 3.1
4.2
EPSS
1.9%
CVE-2021-42277 Nov 10, 01:19 MEDIUM PATCH This Month

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Visual Studio Visual Studio 2017 Visual Studio 2019 +5
NVD VulDB
CVSS 3.1
5.5
EPSS
0.8%
CVE-2021-42276 Nov 10, 01:19 HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD VulDB
CVSS 3.1
7.8
EPSS
2.3%
CVE-2021-42275 Nov 10, 01:19 HIGH PATCH This Week

Microsoft COM for Windows Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD VulDB
CVSS 3.1
8.8
EPSS
1.9%
CVE-2021-42274 Nov 10, 01:19 MEDIUM PATCH This Month

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD VulDB
CVSS 3.1
6.8
EPSS
0.6%
EPSS 5% CVSS 8.0
HIGH This Week

Remote Desktop Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 38% CVSS 8.8
HIGH This Week

Windows SMB Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 6.5
MEDIUM This Month

Windows iSCSI Target Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 35% CVSS 9.8
CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 +7
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Windows Direct Show Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

RCE Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 7.8
HIGH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 3% CVSS 8.8
HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 33% CVSS 9.8
CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 +7
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Desktop Bridge Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +3
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +4
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 7.5
HIGH This Week

Win32 File Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 5.5
MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 +7
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +5
NVD
EPSS 17% CVSS 7.8
HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 7% CVSS 7.8
HIGH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

Windows Hyper-V Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2022 +1
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +3
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Microsoft Windows Server 2016 +3
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Race Condition Microsoft +7
NVD
EPSS 2% CVSS 7.5
HIGH This Week

Win32 Stream Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Windows Update Stack Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +3
NVD
EPSS 3% CVSS 8.8
HIGH This Week

Win32 File Enumeration Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2022 +3
NVD
EPSS 4% CVSS 7.8
HIGH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +5
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +6
NVD
EPSS 2% CVSS 5.4
MEDIUM This Month

Remote Desktop Protocol Client Information Disclosure Vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Remote Desktop Client +11
NVD
EPSS 33% CVSS 4.3
MEDIUM This Month

Windows HTML Platforms Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2008 +10
NVD
EPSS 2% CVSS 7.0
HIGH This Week

Tablet Windows User Interface Application Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Fax and Scan Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Security Support Provider Interface Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 8% CVSS 7.8
HIGH This Week

Windows PDEV Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Windows NT OS Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Windows Event Tracing Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2012 +7
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 +3
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Inking COM Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 4% CVSS 7.0
HIGH This Week

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 +3
NVD
EPSS 3% CVSS 7.2
HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 +7
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +10
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 56% CVSS 6.5
MEDIUM This Month

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 4.4
MEDIUM This Month

Media Foundation Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 +7
NVD
EPSS 19% CVSS 8.8
HIGH This Week

Remote Desktop Client Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 3.3
LOW Monitor

Media Foundation Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 +8
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows 10 +1
NVD
EPSS 7% CVSS 7.5
HIGH PATCH This Week

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 12% CVSS 7.8
HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Windows Mobile Device Management Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 11
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows Digital Media Receiver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows TCP/IP Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft +5
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

NTFS Set Short Name Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +3
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows Recovery Environment Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +3
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows Remote Access Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.3
HIGH PATCH This Week

Windows Setup Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +3
NVD
EPSS 3% CVSS 7.5
HIGH PATCH This Week

Microsoft Message Queuing Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Storage Spaces Controller Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 7.8
HIGH PATCH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Remote Desktop Client Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 7.8
HIGH PATCH This Week

Windows Event Tracing Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2012 +7
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 7.8
HIGH PATCH This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 4% CVSS 7.5
HIGH PATCH This Week

SymCrypt Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Storage Spaces Controller Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 4% CVSS 5.5
MEDIUM PATCH This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 3% CVSS 7.5
HIGH PATCH This Week

Microsoft Message Queuing Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 4% CVSS 7.5
HIGH PATCH This Week

DirectX Graphics Kernel File Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows Server 2016 +4
NVD
EPSS 6% CVSS 9.8
CRITICAL PATCH Act Now

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 3% CVSS 6.5
MEDIUM PATCH This Month

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +11
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 +8
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 +10
NVD VulDB
EPSS 3% CVSS 6.8
MEDIUM PATCH This Month

Windows Hyper-V Denial of Service Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows Server 2012 +7
NVD VulDB
EPSS 0% CVSS 8.8
HIGH PATCH This Week

NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 +9
NVD VulDB
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Windows Feedback Hub Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 +4
NVD VulDB
EPSS 2% CVSS 4.2
MEDIUM PATCH This Month

Chakra Scripting Engine Memory Corruption Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft +5
NVD VulDB
EPSS 1% CVSS 5.5
MEDIUM PATCH This Month

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Visual Studio +7
NVD VulDB
EPSS 2% CVSS 7.8
HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows Server 2016 +4
NVD VulDB
EPSS 2% CVSS 8.8
HIGH PATCH This Week

Microsoft COM for Windows Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows Server 2008 +9
NVD VulDB
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows Server 2016 +4
NVD VulDB
Prev Page 5 of 6 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy