4628 vulnerabilidades · Windows Orden: CVSS EPSS Año ID
CVE-2020-1522
Windows 10 Version 1803 Windows
7.8
HIGH
EPSS
0.4%
2020 1 PoC

An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Speech Runtime handles memory.

Scanner Automatizado
Sin template local disponible
CVE-2020-7311
MA for Windows Windows
7.8
HIGH
EPSS
0.0%
2020 CWE-269 1 PoC

Privilege Escalation vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files.

Scanner Automatizado
Sin template local disponible
CVE-2020-1474
Windows 10 Version 2004 Windows
7.8
HIGH
EPSS
0.8%
2020 1 PoC

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera, scanner, cellular phone) to an affected system and run a specially crafted application to disclose information. The security update addresses the vulnerability by correcting how the WIA Service handles objects in memory.

Scanner Automatizado
Sin template local disponible
CVE-2020-3433
🔥 KEV Cisco AnyConnect Secure Mobility Client Networking Windows
7.8
HIGH
EPSS
4.5%
2020 CWE-427 3 PoCs

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the

Scanner Automatizado
Sin template local disponible
CVE-2020-7289
McAfee Active Response (MAR) for Windows Windows
7.8
HIGH
EPSS
0.0%
2020 CWE-274 1 PoC

Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

Scanner Automatizado
Sin template local disponible
CVE-2020-7312
MA for Windows Windows
7.8
HIGH
EPSS
0.1%
2020 CWE-427 1 PoC

DLL Search Order Hijacking Vulnerability in the installer in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.

Scanner Automatizado
Sin template local disponible
CVE-2016-0040
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
78.9%
2016 3 PoCs

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-0151
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
32.4%
2016 1 PoC

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-7255
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
89.4%
2016 10 PoCs

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-0099
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
90.4%
2016 4 PoCs

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-0185
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
80.2%
2016 1 PoC

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-0165
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
6.2%
2016 1 PoC

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.

Scanner Automatizado
Sin template local disponible
CVE-2016-3309
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
46.8%
2016 2 PoCs

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

Scanner Automatizado
Sin template local disponible
CVE-2018-8611
🔥 KEV Windows 7 Windows
7.8
HIGH
EPSS
16.4%
2018 1 PoC

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Scanner Automatizado
Sin template local disponible
CVE-2018-15442
Cisco WebEx Event Center Networking Windows
7.8
HIGH
EPSS
43.3%
2018 CWE-78 3 PoCs

A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in

Scanner Automatizado
Sin template local disponible
CVE-2018-6756
True Key Windows
7.8
HIGH
EPSS
0.0%
2018 1 PoC

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.

Scanner Automatizado
Sin template local disponible
CVE-2018-8440
🔥 KEV Windows 7 Windows
7.8
HIGH
EPSS
75.4%
2018 3 PoCs

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Scanner Automatizado
Sin template local disponible
CVE-2018-8453
🔥 KEV Windows 7 Windows
7.8
HIGH
EPSS
81.3%
2018 5 PoCs

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Scanner Automatizado
Sin template local disponible
CVE-2010-1297
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
92.8%
2010 4 PoCs

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Scanner Automatizado
Sin template local disponible
CVE-2010-0485
Software Genérico Windows
7.8
HIGH
EPSS
1.1%
2010 1 PoC

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."

Scanner Automatizado
Sin template local disponible