Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 20 of 40 · showing the latest 1,000
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
Use after free in Winsock allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows OLE allows an authorized attacker to disclose information locally.
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.