Windows Windows 11 26H1 · 2026-H1

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows Event Logging Service Remote Code Execution Vulnerability

Windows HTTP Print Provider Remote Code Execution Vulnerability

RPC Runtime Library Remote Code Execution Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to…

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.

Windows DNS Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C…

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows URL Moniker Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Event Logging Service Remote Code Execution Vulnerability

Windows Event Logging Service Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows Hello Elevation of Privilege Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Windows Hello Elevation of Privilege Vulnerability

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

Graphic Fonts Remote Code Execution Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code…

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege…

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile…

Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t…

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code o…

Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg…

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Windows Push Notifications Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

RPC Runtime Library Remote Code Execution Vulnerability

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

Microsoft Brokering File System Elevation of Privilege Vulnerability

Windows COM Elevation of Privilege Vulnerability

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Microsoft JScript Remote Code Execution Vulnerability

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Windows Text Shaping Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized a…

Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi…

Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate pri…

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a netw…

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

Windows TCP/IP Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code o…

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Remote Desktop Protocol Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Windows Fast FAT Driver Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Print Spooler Components Elevation of Privilege Vulnerability

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Volume Manager Driver Elevation of Privilege Vulnerability

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

Windows BitLocker Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Spaceport.sys Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

PowerShell Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred…

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

Microsoft Trace Data Helper Elevation of Privilege Vulnerability

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Windows Performance Monitor Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows Overlay Filter Elevation of Privilege Vulnerability

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Windows Storage Management Provider Elevation of Privilege Vulnerability

Windows Shell Elevation of Privilege Vulnerability

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Volume Manager Driver Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Microsoft Windows Speech Elevation of Privilege Vulnerability

Windows Compressed Folder Elevation of Privilege Vulnerability

Windows Audio Service Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Partition Management Driver Elevation of Privilege Vulnerability

Windows MIDI Service Module Elevation of Privileges Vulnerability

Role: Windows Fax Service Elevation of Privilege Vulnerability

Windows Shell Elevation of Privilege Vulnerability

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Windows Spaceport.sys Elevation of Privilege Vulnerability

Windows Spaceport.sys Remote Code Execution Vulnerability

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Graphic Fonts Elevation of Privilege Vulnerability

Windows Hello Elevation of Privilege Vulnerability

HID Class Driver Elevation of Privilege Vulnerability

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows Smart Card Elevation of Privilege Vulnerability

Windows Credential Providers Elevation of Privilege Vulnerability

Windows Hello Elevation of Privilege Vulnerability

Windows Audio Service Elevation of Privilege Vulnerability

Windows Core Messaging Elevation of Privilege Vulnerability

Windows Core Messaging Elevation of Privilege Vulnerability

Windows Biometric Service Elevation of Privilege Vulnerability

Windows Biometric Service Elevation of Privilege Vulnerability

Windows Biometric Service Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate …

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.