imPC@ndo IT

Microsoft vulnerabilities

15.391 CVE

CVE-2018-8405
Ransomware High 7.8

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Wind…

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 7 more
0.03EPSS
CVE-2021-27059
Exploited High 7.6

Microsoft Office Remote Code Execution Vulnerability

microsoft office
0.03EPSS
CVE-2017-0001
Exploited High 7.8

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a…

microsoft windows_10_1507 · microsoft windows_10_1511 · microsoft windows_10_1607 · microsoft windows_7 · and 6 more
0.03EPSS
CVE-2021-43226
Exploited High 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 15 more
0.03EPSS
CVE-2023-36584
Exploited Medium 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1809 · microsoft windows_10_21h1 · microsoft windows_10_22h2 · and 7 more
0.03EPSS
CVE-2020-0638
Ransomware High 7.8

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege …

microsoft windows_10_1709 · microsoft windows_10_1803 · microsoft windows_10_1809 · microsoft windows_10_1903 · and 5 more
0.03EPSS
CVE-2018-8589
Exploited High 7.8

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

microsoft windows_7 · microsoft windows_server_2008
0.03EPSS
CVE-2022-41125
Exploited High 7.8

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 10 more
0.03EPSS
CVE-2021-31199
Exploited Medium 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 12 more
0.03EPSS
CVE-2022-21919
Exploited High 7.0

Windows User Profile Service Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 13 more
0.03EPSS
CVE-2021-38649
Exploited High 7.0

Open Management Infrastructure Elevation of Privilege Vulnerability

microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_open_management_infrastructure · and 7 more
0.03EPSS
CVE-2021-38645
Exploited High 7.8

Open Management Infrastructure Elevation of Privilege Vulnerability

microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_security_center · and 6 more
0.03EPSS
CVE-2020-0878
Ransomware Medium 4.2

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker …

microsoft chakracore · microsoft edge · microsoft internet_explorer
0.03EPSS
CVE-2024-38226
Exploited High 7.3

Microsoft Publisher Security Feature Bypass Vulnerability

microsoft office_2019 · microsoft office_long_term_servicing_channel · microsoft publisher
0.03EPSS
CVE-2021-31201
Exploited Medium 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · and 12 more
0.03EPSS
CVE-2025-59230
Exploited High 7.8

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 12 more
0.03EPSS
CVE-2022-41049
Exploited Medium 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 8 more
0.02EPSS
CVE-2026-21519
Exploited High 7.8

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · and 8 more
0.02EPSS
CVE-2025-62221
Exploited High 7.8

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · microsoft windows_11_23h2 · and 6 more
0.02EPSS
CVE-2019-0880
Exploited High 7.8

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 9 more
0.02EPSS
CVE-2022-41073
Ransomware High 7.8

Windows Print Spooler Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · and 12 more
0.02EPSS
CVE-2026-56155
Exploited High 7.8

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_server_2012 · microsoft windows_server_2016 · and 3 more
0.02EPSS
CVE-2019-1130
Ransomware High 7.8

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · and 10 more
0.02EPSS
CVE-2025-21391
Exploited High 7.1

Windows Storage Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 9 more
0.02EPSS
CVE-2025-24993
Exploited High 7.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · and 11 more
0.02EPSS