Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 14 of 40 · showing the latest 1,000
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.
Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.