Windows (Microsoft) - vulnerabilities (CVEs)

747 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2025-09-08. Vendor: Microsoft.

CVEs of Windows

• CVE-2025-59033 - CVSS 7.4 (high), 2025-09-08: The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed…
• CVE-2022-50238 - CVSS 7.4 (high), 2025-09-08: The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present…
• CVE-2025-9491 - CVSS 7.8 (high), 2025-08-26: Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2022-40733 - CVSS 6.5 (medium), 2024-12-18: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version…
• CVE-2022-40732 - CVSS 7.5 (high), 2024-12-18: An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version…
• CVE-2024-30164 - CVSS 6.7 (medium), 2024-05-28: Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is…
• CVE-2024-30031 - CVSS 7.8 (high), 2024-05-14: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
• CVE-2024-30029 - CVSS 7.5 (high), 2024-05-14: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2024-30023 - CVSS 7.5 (high), 2024-05-14: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2024-29999 - CVSS 6.8 (medium), 2024-05-14: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2017-20190, 2024-03-27: Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode…
• CVE-2022-0280 - CVSS 7.5 (high), 2022-03-10: A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain…
• CVE-2021-36958 - CVSS 7.8 (high), 2021-08-12: A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who…
• CVE-2020-1463 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation…
• CVE-2020-1468 - CVSS 6.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information…
• CVE-2020-1436 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an…
• CVE-2020-1435 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…
• CVE-2020-1438 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1437 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1424 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation…
• CVE-2020-1428 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1431 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to…
• CVE-2020-1422 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1427 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1430 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would…
• CVE-2020-1421 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who…
• CVE-2020-1426 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure…
• CVE-2020-1429 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager…
• CVE-2020-1434 - CVSS 5.3 (medium), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service…
• CVE-2020-1408 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote…
• CVE-2020-1411 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege…
• CVE-2020-1414 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1419 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information…
• CVE-2020-1407 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code…
• CVE-2020-1410 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could…
• CVE-2020-1413 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1418 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure…
• CVE-2020-1406 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service…
• CVE-2020-1409 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
• CVE-2020-1412 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote…
• CVE-2020-1415 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1420 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker…
• CVE-2020-1405 - CVSS 7.1 (high), 2020-07-14: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile…
• CVE-2020-1394 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of…
• CVE-2020-1397 - CVSS 6.5 (medium), 2020-07-14: An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging…
• CVE-2020-1400 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code…
• CVE-2020-1404 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1393 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an…
• CVE-2020-1396 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully…
• CVE-2020-1399 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1402 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker…
• CVE-2020-1395 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege…
• CVE-2020-1398 - CVSS 6.8 (medium), 2020-07-14: An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited…
• CVE-2020-1401 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code…
• CVE-2020-1387 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification…
• CVE-2020-1390 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1375 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege…
• CVE-2020-1386 - CVSS 5.5 (medium), 2020-07-14: An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User…
• CVE-2020-1389 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information…
• CVE-2020-1374 - CVSS 7.5 (high), 2020-07-14: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client…
• CVE-2020-1385 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker…
• CVE-2020-1388 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'.…
• CVE-2020-1392 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of…
• CVE-2020-1384 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka…
• CVE-2020-1363 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would…
• CVE-2020-1366 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow…
• CVE-2020-1369 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of…
• CVE-2020-1372 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows…
• CVE-2020-1362 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of…
• CVE-2020-1365 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker…
• CVE-2020-1368 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Windows Credential…
• CVE-2020-1371 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker…
• CVE-2020-1364 - CVSS 7.1 (high), 2020-07-14: A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulnerability'.
• CVE-2020-1367 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure…
• CVE-2020-1370 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1373 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…
• CVE-2020-1351 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component…
• CVE-2020-1354 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would…
• CVE-2020-1359 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka…
• CVE-2020-1353 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1358 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker…
• CVE-2020-1361 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need…
• CVE-2020-1352 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would…
• CVE-2020-1357 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker…
• CVE-2020-1360 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of…
• CVE-2020-1267 - CVSS 4.9 (medium), 2020-07-14: This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a…
• CVE-2020-1344 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of…
• CVE-2020-1249 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1333 - CVSS 6.7 (medium), 2020-07-14: An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services…
• CVE-2020-1347 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of…
• CVE-2020-1330 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile…
• CVE-2020-1346 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation…
• CVE-2020-1085 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function…
• CVE-2020-1334 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1324 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the…
• CVE-2020-1317 - CVSS 8.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
• CVE-2020-1348 - CVSS 6.5 (medium), 2020-06-09: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information…
• CVE-2020-1306 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege…
• CVE-2020-1311 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model Elevation of…
• CVE-2020-1316 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege…