Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 24 of 40 · showing the latest 1,000
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Use after free in DNS Server allows an authorized attacker to elevate privileges locally.
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.