WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 1,343 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 275 EPSS ≥ 0.5
1,343matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 275EPSS ≥ 0.520.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 0.1% Not applicable 1,341 99.9% Withdrawn CVE 0 0.0%
Critical 7 0.5% High 799 59.5% Medium 483 36.0% Low 54 4.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1,343 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1,343 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 153 / year
Not applicable: 1,341Outside Waratek scope: 2 Low: 54Medium: 483High: 799Critical: 7 not blocked: 1,343 Working exploit published: 1,343
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 19978 Not applicable8 High2 Medium6 not blocked8 Working exploit published8 19985 Not applicable5 High2 Medium2 Low1 not blocked5 Working exploit published5 199956 Not applicable56 High16 Medium33 Low7 not blocked56 Working exploit published56 200051 Not applicable51 High11 Medium33 Low7 not blocked51 Working exploit published51 200146 Not applicable46 High15 Medium24 Low7 not blocked46 Working exploit published46 200254 Not applicable54 High29 Medium23 Low2 not blocked54 Working exploit published54 200341 Not applicable41 High27 Medium14 not blocked41 Working exploit published41 200443 Outside Waratek scope1 Not applicable42 High22 Medium19 Low2 not blocked43 Working exploit published43 200549 Outside Waratek scope1 Not applicable48 High24 Medium23 Low2 not blocked49 Working exploit published49 200697 Not applicable97 High39 Medium46 Low12 not blocked97 Working exploit published97 200770 Not applicable70 High44 Medium26 not blocked70 Working exploit published70 200861 Not applicable61 High35 Medium26 not blocked61 Working exploit published61 200932 Not applicable32 High18 Medium14 not blocked32 Working exploit published32 201075 Not applicable75 High60 Medium15 not blocked75 Working exploit published75 201125 Not applicable25 Critical1 High20 Medium4 not blocked25 Working exploit published25 201210 Not applicable10 High7 Medium3 not blocked10 Working exploit published10 201337 Not applicable37 High29 Medium8 not blocked37 Working exploit published37 201469 Not applicable69 High65 Medium4 not blocked69 Working exploit published69 201585 Not applicable85 High65 Medium11 Low9 not blocked85 Working exploit published85 201676 Not applicable76 Critical1 High55 Medium18 Low2 not blocked76 Working exploit published76 2017153 Not applicable153 High67 Medium86 not blocked153 Working exploit published153 201891 Not applicable91 High65 Medium23 Low3 not blocked91 Working exploit published91 201956 Not applicable56 High41 Medium15 not blocked56 Working exploit published56 20205 Not applicable5 Critical1 High4 not blocked5 Working exploit published5 20214 Not applicable4 Critical1 High3 not blocked4 Working exploit published4 20222 Not applicable2 High2 not blocked2 Working exploit published2 202314 Not applicable14 High12 Medium2 not blocked14 Working exploit published14 20244 Not applicable4 Critical1 High2 Medium1 not blocked4 Working exploit published4 202517 Not applicable17 Critical1 High14 Medium2 not blocked17 Working exploit published17 20265 Not applicable5 Critical1 High3 Medium1 not blocked5 Working exploit published5
19961999200220052008201120142017202020232026
1,343 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 14 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-58289 Critical 2026-07-03 Not applicable Working exploit published Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-33829 Medium 2026-04-14 Not applicable Working exploit published Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21250 High 2026-02-10 Not applicable Working exploit published Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-21248 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-21244 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2025-59254 High 2025-10-14 Not applicable Working exploit published Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2025-55315 Critical 2025-10-14 Not applicable Working exploit published Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2025-50154 Medium 2025-08-12 Not applicable Working exploit published Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49744 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49730 High 2025-07-08 Not applicable Working exploit published Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
CVE-2025-49683 High 2025-07-08 Not applicable Working exploit published Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.
CVE-2025-49677 High 2025-07-08 Not applicable Working exploit published Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-47987 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.
CVE-2025-49741 High 2025-07-01 Not applicable Working exploit published No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2025-47957 High 2025-06-10 Not applicable Working exploit published Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47175 High 2025-06-10 Not applicable Working exploit published Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-47171 Medium 2025-06-10 Not applicable Working exploit published Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47166 High 2025-06-10 Not applicable Working exploit published Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47161 High 2025-05-15 Not applicable Working exploit published Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVE-2025-27751 High 2025-04-08 Not applicable Working exploit published Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24076 High 2025-03-11 Not applicable Working exploit published Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2025-21293 High 2025-01-14 Not applicable Working exploit published Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2024-38200 Critical 2024-08-12 Not applicable Working exploit published Microsoft Office Spoofing Vulnerability
CVE-2024-30085 High 2024-06-11 Not applicable Working exploit published Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-30038 High 2024-05-14 Not applicable Working exploit published Win32k Elevation of Privilege Vulnerability
CVE-2024-21320 Medium 2024-01-09 Not applicable Working exploit published Windows Themes Spoofing Vulnerability
CVE-2023-38146 High 2023-09-12 Not applicable Working exploit published Windows Themes Remote Code Execution Vulnerability
CVE-2023-33148 High 2023-07-11 Not applicable Working exploit published Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33145 Medium 2023-06-14 Not applicable Working exploit published Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2023-33137 High 2023-06-14 Not applicable Working exploit published Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33131 High 2023-06-14 Not applicable Working exploit published Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-28311 High 2023-04-11 Not applicable Working exploit published Microsoft Word Remote Code Execution Vulnerability
CVE-2023-28293 High 2023-04-11 Not applicable Working exploit published Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28288 High 2023-04-11 Not applicable Working exploit published Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-28285 High 2023-04-11 Not applicable Working exploit published Microsoft Office Remote Code Execution Vulnerability
CVE-2023-24892 High 2023-03-14 Not applicable Working exploit published Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
CVE-2023-23408 Medium 2023-03-14 Not applicable Working exploit published Azure Apache Ambari Spoofing Vulnerability
CVE-2023-23399 High 2023-03-14 Not applicable Working exploit published Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-4510 High 2023-01-26 Not applicable Working exploit published A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through 2.3.3 included.
CVE-2023-21752 High 2023-01-10 Not applicable Working exploit published Windows Backup Service Elevation of Privilege Vulnerability
CVE-2022-41034 High 2022-10-11 Not applicable Working exploit published Visual Studio Code Remote Code Execution Vulnerability
CVE-2022-23277 High 2022-03-09 Not applicable Working exploit published Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31950 High 2021-06-08 Not applicable Working exploit published Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-31195 High 2021-05-11 Not applicable Working exploit published Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31181 High 2021-05-11 Not applicable Working exploit published Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2021-28480 Critical 2021-04-13 Not applicable Working exploit published Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-17136 High 2020-12-10 Not applicable Working exploit published Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2020-17132 Critical 2020-12-10 Not applicable Working exploit published Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-16952 High 2020-10-16 Not applicable Working exploit published <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p> <p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p> <p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>
CVE-2020-1313 High 2020-06-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.
CVE-2020-0668 High 2020-02-11 Not applicable Working exploit published An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
CVE-2019-1476 High 2019-12-10 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
CVE-2019-1364 High 2019-10-10 Not applicable Working exploit published An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.
CVE-2019-1347 Medium 2019-10-10 Not applicable Working exploit published A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346.
CVE-2019-1346 Medium 2019-10-10 Not applicable Working exploit published A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347.
CVE-2019-1345 Medium 2019-10-10 Not applicable Working exploit published An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
CVE-2019-1344 Medium 2019-10-10 Not applicable Working exploit published An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
CVE-2019-1343 Medium 2019-10-10 Not applicable Working exploit published A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347.
CVE-2019-1262 Medium 2019-09-11 Not applicable Working exploit published A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
CVE-2019-1245 Medium 2019-09-11 Not applicable Working exploit published An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.
CVE-2019-1244 Medium 2019-09-11 Not applicable Working exploit published An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.
CVE-2019-1125 Medium 2019-09-03 Not applicable Working exploit published An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information that could be used to try to compromise the affected system further. On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre) involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. This vulnerability, released on August 6, 2019, is a variant of the Spectre Variant 1 speculative execution side channel vulnerability and has been assigned CVE-2019-1125. Microsoft released a security update on July 9, 2019 that addresses the vulnerability through a software change that mitigates how the CPU speculatively accesses memory. Note that this vulnerability does not require a microcode update from your device OEM.
CVE-2019-1184 Medium 2019-08-14 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting unprotected COM calls.
CVE-2019-1170 High 2019-08-14 Not applicable Working exploit published An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.
CVE-2019-1153 Medium 2019-08-14 Not applicable Working exploit published An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
CVE-2019-1152 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1151 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1150 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1149 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1148 Medium 2019-08-14 Not applicable Working exploit published An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.
CVE-2019-1145 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1144 High 2019-08-14 Not applicable Working exploit published A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. There are multiple ways an attacker could exploit the vulnerability: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.
CVE-2019-1128 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127.
CVE-2019-1127 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1128.
CVE-2019-1124 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1123 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1122 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1121 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1120 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1119 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1118 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1117 High 2019-07-15 Not applicable Working exploit published A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128.
CVE-2019-1089 High 2019-07-15 Not applicable Working exploit published An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.
CVE-2019-1019 High 2019-06-12 Not applicable Working exploit published A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges. The issue has been addressed by changing how NTLM validates network authentication messages.
CVE-2019-0959 High 2019-06-12 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system. The security update addresses the vulnerability by correcting how CLFS handles objects in memory.
CVE-2019-0943 High 2019-06-12 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system. The update addresses the vulnerability by correcting how Windows handles calls to ALPC.
CVE-2019-0881 High 2019-05-16 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2019-0836 High 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
CVE-2019-0805 High 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0796 Medium 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0768 Medium 2019-04-09 Not applicable Working exploit published A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0761.
CVE-2019-0735 High 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVE-2019-0732 High 2019-04-09 Not applicable Working exploit published A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVE-2019-0731 High 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0730 High 2019-04-09 Not applicable Working exploit published An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVE-2019-0612 Medium 2019-04-08 Not applicable Working exploit published A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVE-2019-0574 High 2019-01-08 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0573.
CVE-2019-0573 High 2019-01-08 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0574.
CVE-2019-0572 High 2019-01-08 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0573, CVE-2019-0574.
CVE-2019-0571 High 2019-01-08 Not applicable Working exploit published An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0572, CVE-2019-0573, CVE-2019-0574.
‹ prev page 1 of 14 next ›