imPC@ndo EN

Vulnerabilità Microsoft

15.272 CVE

CVE-2018-8405
Ransomware Alta 7.8

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Wind…

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · e altri 7
0.03EPSS
CVE-2021-27059
Sfruttata Alta 7.6

Microsoft Office Remote Code Execution Vulnerability

microsoft office
0.03EPSS
CVE-2017-0001
Sfruttata Alta 7.8

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a…

microsoft windows_10_1507 · microsoft windows_10_1511 · microsoft windows_10_1607 · microsoft windows_7 · e altri 6
0.03EPSS
CVE-2021-43226
Sfruttata Alta 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · e altri 15
0.03EPSS
CVE-2023-36584
Sfruttata Media 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1809 · microsoft windows_10_21h1 · microsoft windows_10_22h2 · e altri 7
0.03EPSS
CVE-2020-0638
Ransomware Alta 7.8

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege …

microsoft windows_10_1709 · microsoft windows_10_1803 · microsoft windows_10_1809 · microsoft windows_10_1903 · e altri 5
0.03EPSS
CVE-2018-8589
Sfruttata Alta 7.8

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

microsoft windows_7 · microsoft windows_server_2008
0.03EPSS
CVE-2022-41125
Sfruttata Alta 7.8

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · e altri 10
0.03EPSS
CVE-2021-31199
Sfruttata Media 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · e altri 12
0.03EPSS
CVE-2022-21919
Sfruttata Alta 7.0

Windows User Profile Service Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · e altri 13
0.03EPSS
CVE-2021-38649
Sfruttata Alta 7.0

Open Management Infrastructure Elevation of Privilege Vulnerability

microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_open_management_infrastructure · e altri 7
0.03EPSS
CVE-2021-38645
Sfruttata Alta 7.8

Open Management Infrastructure Elevation of Privilege Vulnerability

microsoft azure_automation_state_configuration · microsoft azure_automation_update_management · microsoft azure_diagnostics_\(lad\) · microsoft azure_security_center · e altri 6
0.03EPSS
CVE-2020-0878
Ransomware Media 4.2

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker …

microsoft chakracore · microsoft edge · microsoft internet_explorer
0.03EPSS
CVE-2024-38226
Sfruttata Alta 7.3

Microsoft Publisher Security Feature Bypass Vulnerability

microsoft office_2019 · microsoft office_long_term_servicing_channel · microsoft publisher
0.03EPSS
CVE-2021-31201
Sfruttata Media 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_1909 · e altri 12
0.03EPSS
CVE-2025-59230
Sfruttata Alta 7.8

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · e altri 12
0.03EPSS
CVE-2022-41049
Sfruttata Media 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · e altri 8
0.02EPSS
CVE-2026-21519
Sfruttata Alta 7.8

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · e altri 8
0.02EPSS
CVE-2025-62221
Sfruttata Alta 7.8

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1809 · microsoft windows_10_21h2 · microsoft windows_10_22h2 · microsoft windows_11_23h2 · e altri 6
0.02EPSS
CVE-2019-0880
Sfruttata Alta 7.8

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · e altri 9
0.02EPSS
CVE-2022-41073
Ransomware Alta 7.8

Windows Print Spooler Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_20h2 · e altri 12
0.02EPSS
CVE-2026-56155
Sfruttata Alta 7.8

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_server_2012 · microsoft windows_server_2016 · e altri 3
0.02EPSS
CVE-2019-1130
Ransomware Alta 7.8

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1703 · microsoft windows_10_1709 · e altri 10
0.02EPSS
CVE-2025-21391
Sfruttata Alta 7.1

Windows Storage Elevation of Privilege Vulnerability

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · e altri 9
0.02EPSS
CVE-2025-24993
Sfruttata Alta 7.8

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

microsoft windows_10_1507 · microsoft windows_10_1607 · microsoft windows_10_1809 · microsoft windows_10_21h2 · e altri 11
0.02EPSS