MediumCVSS 6.5
EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Technology
Windows vulnerabilities
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11,371
- Critical
- 310
- High
- 7,791
- Medium
- 3,108
- Low
- 160
- Unscored
- 2
- CISA KEV
- 252
Latest Windows CVEs
Newest publication first · page 32 of 40 · showing the latest 1,000
-
-
MediumCVSS 6.5 EPSS 0.95%
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 1.1%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 1.1%
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
-
CriticalCVSS 9.8 EPSS 1.0%
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
-
CriticalCVSS 9.8 EPSS 0.87%
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
CriticalCVSS 9.8 EPSS 1.1%
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 1.1%
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
-
HighCVSS 7.0 EPSS 0.28%
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.29%
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.0 EPSS 0.28%
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.30%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.0 EPSS 0.28%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.30%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.35%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CriticalCVSS 9.8 EPSS 1.1%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.8 EPSS 0.34%
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.