Actively exploited vulnerabilities (CISA KEV)

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…

Windows Certificate Dialog Elevation of Privilege Vulnerability

Microsoft Windows Elevation of Privilege Vulnerability

Windows Error Reporting Manager Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.8

2019-09-11

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…

Windows Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 10.0

2019-07-23

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…

HIGH 8.8

2019-07-23

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…

Windows Elevation of Privilege Vulnerability

Microsoft splwow64 Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …

Windows Elevation of Privilege Vulnerability

GDI+ Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows SMB Information Disclosure Vulnerability

HIGH 7.8

WinRAR

2019-02-05

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…

Microsoft Windows Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…

Windows ALPC Elevation of Privilege Vulnerability

Windows Shell Remote Code Execution Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

HIGH 7.5

2018-06-11

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a…

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …

Microsoft COM for Windows Remote Code Execution Vulnerability

HIGH 7.8

2018-01-10

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability d…

HIGH 8.8

2018-01-10

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability …

HIGH 7.8

2017-10-13

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 200…

HIGH 7.8

2017-10-13

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles …

Windows Search Remote Code Execution Vulnerability

LNK Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows COM Elevation of Privilege Vulnerability

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…

Windows SMB Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows SMB Remote Code Execution Vulnerability