Vulnerabilities

TI-2022-18022 CVE-2022-38396 · GHSA-4fqc-92ph-66xx

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions…

LOW 36

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00407 Published 2023-02-03 No fix listed

TI-2021-19234 CVE-2021-43226 · GHSA-98jh-5xvm-p5ph

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03275 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59

TI-2021-18181 CVE-2021-41357 · GHSA-pph6-grp2-wvvw

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.19043.1288, 10.0.20348.288 +3

TI-2021-17500 CVE-2021-40450 · GHSA-v7qc-rhmv-f6j4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +5

TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-15031 CVE-2021-36955 · GHSA-g26f-6mx8-j24w

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04071 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10

TI-2021-15025 CVE-2021-36948 · GHSA-fcr2-qx8m-pfhp

Windows Update Medic Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.2327 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13514 CVE-2021-34486 · GHSA-793m-wq3j-whvr

Windows Event Tracing Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09328 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416

TI-2021-13512 CVE-2021-34484 · GHSA-mp6h-cxp8-82j6

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.21827 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-15014 CVE-2021-36934 · GHSA-x4m2-px5g-5q55

Windows Elevation of Privilege Vulnerability

CRITICAL 93KEV

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.67252 Published 2021-07-22 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-13141 CVE-2021-33771 · GHSA-jv37-xg37-jxgp

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10172 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +6

TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119

TI-2021-13116 CVE-2021-33742 · GHSA-gf47-3hhj-gv96

Windows MSHTML Platform Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.59407 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +11 CWE-787

TI-2021-13113 CVE-2021-33739 · GHSA-4mwq-m8xw-34mr

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 96KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.06609 Published 2021-06-08 Fixed in 10.0.18363.1621, 10.0.19043.1052 +2

TI-2021-11943 CVE-2021-31956 · GHSA-jj4q-6c47-cggx

Windows NTFS Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.22273 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10 CWE-191

TI-2021-11942 CVE-2021-31955 · GHSA-4grg-84cr-6c2h

Windows Kernel Information Disclosure Vulnerability

HIGH 82KEV

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.81107 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +3 CWE-497

TI-2021-11419 CVE-2021-31201 · GHSA-fc83-h5w7-44hc

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CRITICAL 91KEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02617 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10

TI-2021-11417 CVE-2021-31199 · GHSA-j8p4-6frh-8hrj

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CRITICAL 93KEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02979 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10

TI-2021-01392 CVE-2021-1675 · GHSA-vwmm-qq95-vqhf

Windows Print Spooler Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.85305 Published 2021-06-08 Fixed in 10.0.17763.1999, 10.0.18363.1621 +10

TI-2021-11386 CVE-2021-31166 · GHSA-3mj9-c62w-jw5w

HTTP Protocol Stack Remote Code Execution Vulnerability

CRITICAL 100KEV

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99867 Published 2021-05-11 Fixed in 10.0.19041.982, 10.0.19042.982 CWE-416

TI-2021-09473 CVE-2021-28310 · GHSA-8mmc-r5c6-h963

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08398 Published 2021-04-13 Fixed in publication CWE-787

TI-2021-01448 CVE-2021-1732 · GHSA-gvwr-5hrc-2gr5

Windows Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.78376 Published 2021-02-25 Fixed in publication CWE-787

Vulnerabilities

Filters