Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 18 of 40 · showing the latest 1,000
Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Security Account Manager allows an authorized attacker to deny service over a network.
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to disclose information locally.
Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.