Technology
Microsoft Windows client and server operating systems. 11,371 published CVES affecting Windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 39 of 40 · showing the latest 1,000
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.