Filtered by vendor Microsoft
Subscriptions
Filtered by product Windows Rt 8.1
Subscriptions
Total
2312 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-24500 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 8.8 High |
Windows SMB Remote Code Execution Vulnerability | ||||
CVE-2022-24494 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||||
CVE-2022-24542 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Win32k Elevation of Privilege Vulnerability | ||||
CVE-2022-24530 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Installer Elevation of Privilege Vulnerability | ||||
CVE-2022-24544 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Kerberos Elevation of Privilege Vulnerability | ||||
CVE-2022-24534 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.5 High |
Win32 Stream Enumeration Remote Code Execution Vulnerability | ||||
CVE-2022-24485 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.5 High |
Win32 File Enumeration Remote Code Execution Vulnerability | ||||
CVE-2022-24533 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 8.0 High |
Remote Desktop Protocol Remote Code Execution Vulnerability | ||||
CVE-2022-24474 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Win32k Elevation of Privilege Vulnerability | ||||
CVE-2022-24521 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.8 High |
Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||||
CVE-2022-21983 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-24 | 7.5 High |
Win32 Stream Enumeration Remote Code Execution Vulnerability | ||||
CVE-2021-1675 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2024-06-20 | 7.8 High |
Windows Print Spooler Remote Code Execution Vulnerability | ||||
CVE-2019-1182 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2024-06-18 | 9.8 Critical |
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests. | ||||
CVE-2019-1187 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2024-06-18 | 5.5 Medium |
A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application. The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input. | ||||
CVE-2019-1172 | 1 Microsoft | 6 Windows 10, Windows 8.1, Windows Rt 8.1 and 3 more | 2024-06-18 | 4.3 Medium |
An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user's account. To exploit the vulnerability, an attacker would have to trick a user into browsing to a specially crafted website, allowing the attacker to steal the user's token. The security update addresses the vulnerability by correcting how MSA handles cookies. | ||||
CVE-2019-1143 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2024-06-18 | 5.5 Medium |
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage. The update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. | ||||
CVE-2023-21760 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-06-14 | 7.1 High |
Windows Print Spooler Elevation of Privilege Vulnerability | ||||
CVE-2023-21747 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more | 2024-06-14 | 7.8 High |
Windows Kernel Elevation of Privilege Vulnerability | ||||
CVE-2019-1212 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2024-06-12 | 9.8 Critical |
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets. | ||||
CVE-2023-21739 | 1 Microsoft | 10 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 7 more | 2024-06-10 | 7.0 High |
Windows Bluetooth Driver Elevation of Privilege Vulnerability |