Actively exploited vulnerabilities (CISA KEV)

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

Windows Shell Spoofing Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Denial of Service Vulnerability

Desktop Window Manager Elevation of Privilege Vulnerability

MSHTML Framework Security Feature Bypass Vulnerability

Windows Shell Security Feature Bypass Vulnerability

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

Windows Agere Modem Driver Elevation of Privilege Vulnerability

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This…

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int…

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install…

Windows SMB Client Elevation of Privilege Vulnerability

Internet Shortcut Files Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability