CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| 10d ago | 7 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Improper access control in Windows Server allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally. |
| 10d ago | 7 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| 10d ago | 7.8 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
| 10d ago | 8.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| 10d ago | 7.8 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| 10d ago | 7.1 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.3 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
| 10d ago | 7.3 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.5 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. |
| 10d ago | 7.5 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
| 10d ago | 7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.8 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| 10d ago | 8.4 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| 10d ago | 7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
| 10d ago | 7.5 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. |
| 10d ago | 8.8 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |