Microsoft vulnerabilities
15.391 CVE
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Wind…
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 7 moreMicrosoft Office Remote Code Execution Vulnerability
microsoft officeThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a…
microsoft windows_10_1507 · microsoft windows_10_1511 · microsoft windows_10_1607 · microsoft windows_7 · and 6 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 15 moreWindows Mark of the Web Security Feature Bypass Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1809 · microsoft windows_10_21h1 · microsoft windows_10_22h2 · and 7 moreAn elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege …
microsoft windows_10_1709 · microsoft windows_10_1803 · microsoft windows_10_1809 · microsoft windows_10_1903 · and 5 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
microsoft windows_7 · microsoft windows_server_2008Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 10 moreMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 12 moreWindows User Profile Service Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 13 moreOpen Management Infrastructure Elevation of Privilege Vulnerability
microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_open_management_infrastructure · and 7 moreOpen Management Infrastructure Elevation of Privilege Vulnerability
microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_security_center · and 6 more<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker …
microsoft chakracore · microsoft edge · microsoft internet_explorerMicrosoft Publisher Security Feature Bypass Vulnerability
microsoft office_2019 · microsoft office_long_term_servicing_channel · microsoft publisherMicrosoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 12 moreImproper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 12 moreWindows Mark of the Web Security Feature Bypass Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 8 moreAccess of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · and 8 moreUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · microsoft windows_11_23h2 · and 6 moreA local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 9 moreWindows Print Spooler Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 12 moreInsufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_server_2012 · microsoft windows_server_2016 · and 3 moreAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 10 moreWindows Storage Elevation of Privilege Vulnerability
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 9 moreHeap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 11 more