Priority MEDIUM 46
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.11441 · Published 2026-06-09 · Fixed in 10.0.14393.9234, 10.0.22631.7219 +4 CWE-200
Priority CRITICAL 93KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03275 · Published 2021-12-15 · Fixed in 10.0.17763.2366, 10.0.18363.1977 +13
Priority CRITICAL 97KEV
Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.7717 · Published 2021-11-10 · Fixed in 6.1.7601.25769, 6.0.6003.21282 +6
Priority CRITICAL 92KEV
Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.73297 · Published 2021-11-10 · Fixed in 6.1.7601.25769, 6.0.6003.21282 +7
Priority CRITICAL 93KEV
Windows Installer Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.19452 · Published 2021-11-10 · Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59
Priority CRITICAL 93KEV
Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01523 · Published 2021-10-13 · Fixed in 10.0.19043.1288, 10.0.20348.288 +3
Priority CRITICAL 93KEV
Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01523 · Published 2021-10-13 · Fixed in 10.0.17763.2237, 10.0.18363.1854 +5
Priority CRITICAL 93KEV
Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.81936 · Published 2021-10-13 · Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416
Priority CRITICAL 97KEV
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.9784 · Published 2021-09-15 · Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22
Priority CRITICAL 93KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04071 · Published 2021-09-15 · Fixed in 10.0.10240.19060, 10.0.14393.4651 +10
Priority CRITICAL 93KEV
Windows Update Medic Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.2327 · Published 2021-08-12 · Fixed in 10.0.17763.2114, 10.0.18363.1734 +3
Priority CRITICAL 92KEV
Windows LSA Spoofing Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.66023 · Published 2021-08-12 · Fixed in 6.1.7601.25685, 6.0.6003.21192 +6
Priority CRITICAL 93KEV
Windows Event Tracing Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.09328 · Published 2021-08-12 · Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416
Priority CRITICAL 93KEV
Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.21827 · Published 2021-08-12 · Fixed in 10.0.10240.19022, 10.0.14393.4583 +9
Priority CRITICAL 93KEV
Windows Kernel Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.10172 · Published 2021-07-14 · Fixed in 10.0.10240.19003, 10.0.14393.4530 +6
Priority CRITICAL 93KEV
Windows Kernel Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0454 · Published 2021-07-14 · Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119
Priority CRITICAL 96KEV
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.06609 · Published 2021-06-08 · Fixed in 10.0.18363.1621, 10.0.19043.1052 +2
Priority CRITICAL 93KEV
Windows NTFS Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.22273 · Published 2021-06-08 · Fixed in 10.0.17763.1999, 10.0.18363.1621 +10 CWE-191
Priority HIGH 82KEV
Windows Kernel Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.81107 · Published 2021-06-08 · Fixed in 10.0.17763.1999, 10.0.18363.1621 +3 CWE-497
Priority CRITICAL 91KEV
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02617 · Published 2021-06-08 · Fixed in 10.0.17763.1999, 10.0.18363.1621 +10
Priority CRITICAL 93KEV
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02979 · Published 2021-06-08 · Fixed in 10.0.17763.1999, 10.0.18363.1621 +10
Priority CRITICAL 93KEV
Windows Print Spooler Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.85305 · Published 2021-06-08 · Fixed in 10.0.17763.1999, 10.0.18363.1621 +10
Priority CRITICAL 100KEV
HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99867 · Published 2021-05-11 · Fixed in 10.0.19041.982, 10.0.19042.982 CWE-416
Priority CRITICAL 93KEV
Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.08398 · Published 2021-04-13 · Fixed in publication CWE-787
Priority CRITICAL 93KEV
Windows Win32k Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.78376 · Published 2021-02-25 · Fixed in publication CWE-787
Load more