Fixes 74 records
Priority CRITICAL 93KEV
Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.59205 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-787
Priority CRITICAL 90KEV
Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02567 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10 CWE-59
Priority HIGH 80
Secure Boot Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.09116 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-863
Priority HIGH 69
Windows Certificate Spoofing Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00721 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11 CWE-295
Priority MEDIUM 55
Windows Kernel Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.24515 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8 CWE-362
Priority MEDIUM 52
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06592 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +6
Priority MEDIUM 48
Windows GDI+ Information Disclosure Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04103 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority MEDIUM 47
Windows GDI Information Disclosure Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03729 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority MEDIUM 47
DirectX Graphics Kernel Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02546 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +4
Priority MEDIUM 47
Windows Security Center API Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02476 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7
Priority MEDIUM 46
Remote Desktop Protocol Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0863 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority MEDIUM 46
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04644 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority MEDIUM 46
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04399 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority MEDIUM 43
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02929 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority MEDIUM 43
Windows Kerberos Elevation of Privilege Vulnerability
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02929 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority MEDIUM 43
Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02638 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority MEDIUM 43
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02942 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +12
Priority MEDIUM 43
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02942 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +12
Priority MEDIUM 41
Windows Hyper-V Elevation of Privilege Vulnerability
CVSS 3.1CRITICAL 9.0· Adjacent network · Low privileges · No interaction · EPSS 0.0095 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8
Priority LOW 39
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03202 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 39
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03202 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 39
Windows Modern Execution Server Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02688 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 39
Windows Geolocation Service Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02813 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +6
Priority LOW 39
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03556 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 38
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02841 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 38
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01085 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 37
Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01257 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7 CWE-59
Priority LOW 37
Tile Data Repository Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00694 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7
Priority LOW 37
Windows Cleanup Manager Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01519 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-59
Priority LOW 36
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 36
Windows GDI+ Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02918 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 36
Windows Installer Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0093 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 36
Windows Hyper-V Security Feature Bypass Vulnerability
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00748 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 36
Windows GDI Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00835 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7
Priority LOW 35
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00685 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 35
DirectX Graphics Kernel Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00694 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +3
Priority LOW 35
Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00679 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +6 CWE-269
Priority LOW 35
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00685 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 35
Windows Storage Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00694 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8
Priority LOW 35
Windows Event Tracing Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00694 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 35
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00696 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 35
Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00694 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 35
Clipboard User Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00676 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +4
Priority LOW 35
Task Flow Data Engine Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00676 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 35
Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00709 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 35
Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00709 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-119
Priority LOW 35
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00685 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 35
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00653 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 35
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00653 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10
Priority LOW 34
Windows StateRepository API Server file Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0069 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 33
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00716 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 33
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 32
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.4· Physical · No auth · No interaction · EPSS 0.00672 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8
Priority LOW 32
Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.006 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-362
Priority LOW 32
Windows Devices Human Interface Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00671 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7
Priority LOW 32
Windows Push Notifications Apps Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0069 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8
Priority LOW 32
Windows System Launcher Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00597 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +7
Priority LOW 32
Connected Devices Platform Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0079 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +4
Priority LOW 32
Windows UI Immersive Server API Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0079 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 32
Windows Application Model Core API Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00649 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 32
Windows AppContracts API Server Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0079 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +6
Priority LOW 32
Windows Accounts Control Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00649 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8
Priority LOW 31
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 31
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 31
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 31
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 31
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00758 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +9
Priority LOW 31
DirectX Graphics Kernel File Denial of Service Vulnerability
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.01115 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 31
Windows Hyper-V Denial of Service Vulnerability
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.01021 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 30
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0307 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +11
Priority LOW 30
Storage Spaces Controller Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0294 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-125
Priority LOW 28
Win32k Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01318 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +8 CWE-125
Priority LOW 27
Windows Defender Application Control Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01127 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +5
Priority LOW 22
Windows Hyper-V Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 4.6· Adjacent network · Low privileges · No interaction · EPSS 0.0068 · Published 2022-01-11 · Fixed in 10.0.17763.2452, 10.0.18363.2037 +10