Filtered by vendor Microsoft Subscriptions
Filtered by product Windows Rt 8.1 Subscriptions
Total 2312 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-24500 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 8.8 High
Windows SMB Remote Code Execution Vulnerability
CVE-2022-24494 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-24542 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-24530 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-24544 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-24534 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.5 High
Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2022-24485 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.5 High
Win32 File Enumeration Remote Code Execution Vulnerability
CVE-2022-24533 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 8.0 High
Remote Desktop Protocol Remote Code Execution Vulnerability
CVE-2022-24474 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-24521 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-21983 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-24 7.5 High
Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2021-1675 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-20 7.8 High
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2019-1182 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-18 9.8 Critical
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
CVE-2019-1187 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-18 5.5 Medium
A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application. The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.
CVE-2019-1172 1 Microsoft 6 Windows 10, Windows 8.1, Windows Rt 8.1 and 3 more 2024-06-18 4.3 Medium
An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user's account. To exploit the vulnerability, an attacker would have to trick a user into browsing to a specially crafted website, allowing the attacker to steal the user's token. The security update addresses the vulnerability by correcting how MSA handles cookies.
CVE-2019-1143 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-18 5.5 Medium
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.
CVE-2023-21760 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2024-06-14 7.1 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-21747 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more 2024-06-14 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2019-1212 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-06-12 9.8 Critical
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.
CVE-2023-21739 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 7 more 2024-06-10 7.0 High
Windows Bluetooth Driver Elevation of Privilege Vulnerability