주요 제품 취약점 (2,105건)
"Windows" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Kingsoft WPS Office
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows al…
|
CVE-2024-7262 | 7.8 | CWE-22 | KEV | 2024-09-03 |
|
Windows
Microsoft Windows
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
|
CVE-2024-38193 | 7.8 | CWE-416 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
|
CVE-2024-38107 | 7.8 | CWE-416 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows
Windows Hyper-V Elevation of Privilege Vulnerability
|
CVE-2024-38080 | 7.8 | CWE-190 | KEV | 2024-07-09 |
|
Windows
Microsoft Windows
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
CVE-2024-26169 | 7.8 | CWE-269 | KEV | 2024-06-13 |
|
Windows
Microsoft DWM Core Library
Windows DWM Core Library Elevation of Privilege Vulnerability
|
CVE-2024-30051 | 7.8 | CWE-122 | KEV | 2024-05-14 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-38028 | 7.8 | — | KEV | 2024-04-23 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2024-21338 | 7.8 | CWE-822 | KEV | 2024-03-04 |
|
Windows
Microsoft Windows
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
CVE-2023-36036 | 7.8 | CWE-122 | KEV | 2023-11-14 |
|
Windows
Microsoft Windows
Windows DWM Core Library Elevation of Privilege Vulnerability
|
CVE-2023-36033 | 7.8 | CWE-822 | KEV | 2023-11-14 |
|
Windows
Android Framework
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local e…
|
CVE-2023-35674 | 7.8 | CWE-269 | KEV | 2023-09-13 |
|
Windows
Microsoft Windows
Windows Error Reporting Service Elevation of Privilege Vulnerability
|
CVE-2023-36874 | 7.8 | CWE-59 | KEV | 2023-07-11 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Elevation of Privilege Vulnerability
|
CVE-2023-32046 | 7.8 | — | KEV | 2023-07-11 |
|
Windows
Microsoft Win32k
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
|
CVE-2016-0165 | 7.8 | — | KEV | 2023-06-22 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2023-28252 | 7.8 | CWE-122 | KEV | 2023-04-11 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Cert…
|
CVE-2019-1388 | 7.8 | CWE-269 | KEV | 2023-04-07 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2023-23376 | 7.8 | CWE-122 | KEV | 2023-02-14 |
|
Windows
Microsoft Windows
Windows Graphics Component Remote Code Execution Vulnerability
|
CVE-2023-21823 | 7.8 | CWE-190 | KEV | 2023-02-14 |
|
Windows
Intel Ethernet Diagnostics Driver for Windows
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a de…
|
CVE-2015-2291 | 7.8 | CWE-20 | KEV | 2023-02-10 |
|
Windows
Microsoft Windows
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
|
CVE-2022-41125 | 7.8 | CWE-787 | KEV | 2022-11-08 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-41073 | 7.8 | CWE-787 | KEV | 2022-11-08 |
|
Windows
Cisco AnyConnect Secure
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, …
|
CVE-2020-3433 | 7.8 | CWE-427 | KEV | 2022-10-24 |
|
Windows
Microsoft Windows COM+ Event System Service
Windows COM+ Event System Service Elevation of Privilege Vulnerability
|
CVE-2022-41033 | 7.8 | CWE-843 | KEV | 2022-10-11 |
|
Windows
Microsoft Windows
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote att…
|
CVE-2010-2568 | 7.8 | CWE-20 | KEV | 2022-09-15 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2022-37969 | 7.8 | CWE-787 | KEV | 2022-09-14 |
|
Windows
Microsoft Windows
Windows Runtime Remote Code Execution Vulnerability
|
CVE-2022-21971 | 7.8 | CWE-824 | KEV | 2022-08-18 |
|
Windows
Microsoft Windows
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
|
CVE-2022-34713 | 7.8 | — | KEV | 2022-08-09 |
|
Windows
Microsoft Windows
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
|
CVE-2022-22047 | 7.8 | CWE-426 | KEV | 2022-07-12 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who succ…
|
CVE-2022-30190 | 7.8 | — | KEV | 2022-06-14 |
|
Windows
Microsoft Windows
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…
|
CVE-2012-0151 | 7.8 | CWE-20 | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android;…
|
CVE-2011-0609 | 7.8 | — | KEV | 2022-06-08 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x …
|
CVE-2010-1297 | 7.8 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Adobe Acrobat and Reader
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Wi…
|
CVE-2009-4324 | 7.8 | CWE-416 | KEV | 2022-06-08 |
|
Windows
Microsoft Windows
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows S…
|
CVE-2016-3393 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Priv…
|
CVE-2015-6175 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Liv…
|
CVE-2015-1671 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly r…
|
CVE-2015-0310 | 7.8 | CWE-200 | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 S…
|
CVE-2015-0016 | 7.8 | CWE-22 | KEV | 2022-05-25 |
|
Windows
Microsoft Input Method Editor (IME) Japanese
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka I…
|
CVE-2014-4077 | 7.8 | — | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of P…
|
CVE-2018-8611 | 7.8 | CWE-404 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 20…
|
CVE-2017-0005 | 7.8 | CWE-119 | KEV | 2022-05-24 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privile…
|
CVE-2020-1027 | 7.8 | CWE-787 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in acc…
|
CVE-2019-1385 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation o…
|
CVE-2019-1130 | 7.8 | CWE-59 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnera…
|
CVE-2019-0880 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulner…
|
CVE-2018-8589 | 7.8 | — | KEV | 2022-05-23 |
|
Windows
Microsoft Win32k
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win…
|
CVE-2014-4113 | 7.8 | — | KEV | 2022-05-04 |
|
Windows
Microsoft Windows
Windows Print Spooler Elevation of Privilege Vulnerability
|
CVE-2022-22718 | 7.8 | CWE-269 | KEV | 2022-04-19 |
|
Windows
Microsoft Windows
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
CVE-2022-24521 | 7.8 | CWE-787 | KEV | 2022-04-13 |
|
Windows
Adobe Flash Player
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 o…
|
CVE-2014-9163 | 7.8 | CWE-121 | KEV | 2022-04-13 |
|
Windows
Microsoft Windows
Windows User Profile Service Elevation of Privilege Vulnerability
|
CVE-2021-34484 | 7.8 | CWE-269 | KEV | 2022-03-31 |
|
Windows
Microsoft Windows
Windows Event Tracing Elevation of Privilege Vulnerability
|
CVE-2021-34486 | 7.8 | CWE-416 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Eleva…
|
CVE-2018-8440 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8406 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft DirectX Graphics Kernel (DXGKRNL)
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G…
|
CVE-2018-8405 | 7.8 | CWE-404 | KEV | 2022-03-28 |
|
Windows
Microsoft Client-Server Run-time Subsystem (CSRSS)
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 …
|
CVE-2016-0151 | 7.8 | CWE-269 | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted …
|
CVE-2016-0040 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Win32k
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V…
|
CVE-2013-3660 | 7.8 | CWE-119 | KEV | 2022-03-28 |
|
Windows
Microsoft Ancillary Function Driver (afd.sys)
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to…
|
CVE-2011-2005 | 7.8 | — | KEV | 2022-03-28 |
|
Windows
Microsoft Windows
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Window…
|
CVE-2010-4398 | 7.8 | CWE-787 | KEV | 2022-03-28 |