Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 16 of 40 · showing the latest 1,000
Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.
Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.