CVE-2025-11711 | Medium | 6.5 | 2025-10-14 | There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefo… |
CVE-2025-48819 | High | 7.1 | 2025-07-08 | Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges ov… |
CVE-2025-30394 | Medium | 5.9 | 2025-05-13 | Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-27732 | High | 7.0 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2025-27484 | High | 7.5 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges ov… |
CVE-2025-27482 | High | 8.1 | 2025-04-08 | Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-27475 | High | 7.0 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
CVE-2025-27471 | Medium | 5.9 | 2025-04-08 | Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-26686 | High | 7.5 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
CVE-2025-26671 | High | 8.1 | 2025-04-08 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-26665 | High | 7.0 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally. |
CVE-2025-26648 | High | 7.8 | 2025-04-08 | Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-24045 | High | 8.1 | 2025-03-11 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-24035 | High | 8.1 | 2025-03-11 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2025-21309 | High | 8.1 | 2025-01-14 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2025-21294 | High | 8.1 | 2025-01-14 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21224 | High | 8.1 | 2025-01-14 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-49132 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49128 | High | 8.1 | 2024-12-12 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2024-49126 | High | 8.1 | 2024-12-12 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
CVE-2024-49123 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49115 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49108 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49106 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49097 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49091 | High | 7.2 | 2024-12-12 | Windows Domain Name Service Remote Code Execution Vulnerability |
CVE-2024-43633 | Medium | 6.5 | 2024-11-12 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-38264 | Medium | 5.9 | 2024-11-12 | Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
CVE-2024-43563 | High | 7.8 | 2024-10-08 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38262 | High | 7.5 | 2024-10-08 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38263 | High | 7.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38137 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38131 | High | 8.8 | 2024-08-13 | Clipboard Virtual Channel Extension Remote Code Execution Vulnerability |
CVE-2024-38106 | High | 7.0 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-34525 | Medium | 5.3 | 2024-05-06 | FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file. |
CVE-2024-26242 | High | 7.0 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26236 | High | 7.0 | 2024-04-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-21446 | High | 7.8 | 2024-03-12 | NTFS Elevation of Privilege Vulnerability |
CVE-2024-21405 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21355 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-20686 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36005 | High | 7.5 | 2023-12-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2023-36403 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-38159 | High | 7.0 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-35362 | High | 7.8 | 2023-07-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-35360 | High | 7.0 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35346 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35345 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35344 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35340 | High | 7.8 | 2023-07-11 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2023-35310 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35309 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-33163 | High | 7.5 | 2023-07-11 | Windows Network Load Balancing Remote Code Execution Vulnerability |
CVE-2023-32010 | High | 7.0 | 2023-06-14 | Windows Bus Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-28283 | High | 8.1 | 2023-05-09 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-24946 | High | 7.8 | 2023-05-09 | Windows Backup Service Elevation of Privilege Vulnerability |
CVE-2023-24899 | High | 7.0 | 2023-05-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-28278 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28273 | High | 7.0 | 2023-04-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-28256 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28255 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28238 | High | 7.5 | 2023-04-11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2023-28236 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28229 | High | 7.0 | 2023-04-11 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2023-28224 | High | 7.1 | 2023-04-11 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-28220 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28219 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-23414 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23407 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23393 | High | 7.0 | 2023-03-14 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
CVE-2023-21771 | High | 7.0 | 2023-01-10 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
CVE-2023-21766 | Medium | 4.7 | 2023-01-10 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2023-21739 | High | 7.0 | 2023-01-10 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-21548 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-21546 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21535 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |