Fixes 24 records
Priority CRITICAL 97KEV
Windows MSHTML Platform Spoofing Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.54486 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-451
Priority CRITICAL 93KEV
Windows Installer Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.06263 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-269
Priority HIGH 82KEV
Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.10026 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-693
Priority MEDIUM 57
Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12916 · Published 2024-09-10 · Fixed in 10.0.10240.20766 CWE-416
Priority MEDIUM 46
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01486 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +10 CWE-125
Priority MEDIUM 45
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.06194 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20
Priority MEDIUM 45
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.06021 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20
Priority MEDIUM 42
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03352 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122
Priority MEDIUM 42
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03408 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122
Priority LOW 38
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0095 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-416
Priority LOW 38
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00874 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-20
Priority LOW 37
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00693 · Published 2024-09-10 · Fixed in 16.0.16827.2xxxxx, 16.0.14326.21xxxx +15 CWE-126
Priority LOW 37
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00695 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +12 CWE-415
Priority LOW 37
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00762 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20
Priority LOW 37
Windows Kerberos Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01749 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-1390
Priority LOW 37
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00766 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122
Priority LOW 37
PowerShell Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00695 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20
Priority LOW 36
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00756 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-416
Priority LOW 36
Windows Security Zone Mapping Security Feature Bypass Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00899 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-41
Priority LOW 31
Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01229 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +5 CWE-693
Priority LOW 31
Windows Networking Denial of Service Vulnerability
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00929 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-20
Priority LOW 30
Windows Hyper-V Denial of Service Vulnerability
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00717 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-416
Priority LOW 29
Windows Authentication Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00724 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-908
Priority LOW 26
Windows Kernel-Mode Driver Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00717 · Published 2024-09-10 · Fixed in 10.0.10240.20766, 10.0.14393.7336 +7 CWE-908