2040 vulnerabilidades · Windows Orden: CVSS EPSS Año ID
CVE-2025-22447
RemoteView Agent (for Windows) Windows
7.8
HIGH
EPSS
0.1%
2025 CWE-276 1 PoC

Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege.

CVE-2025-24990
🔥 KEV Windows 10 Version 1507 Windows
7.8
HIGH
EPSS
2.8%
2025 CWE-822 2 PoCs

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.

CVE-2020-8895
Earth Pro Windows
7.8
HIGH
EPSS
0.0%
2020 CWE-427 1 PoC

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

CVE-2020-17035
Windows 10 Version 1803 Windows
7.8
HIGH
EPSS
1.1%
2020 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-0683
🔥 KEV Windows Windows
7.8
HIGH
EPSS
31.1%
2020 4 PoCs

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

CVE-2020-1027
🔥 KEV Windows Windows
7.8
HIGH
EPSS
11.9%
2020 1 PoC

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

CVE-2020-7286
McAfee Exploit Detection and Response (EDR) for Windows Windows
7.8
HIGH
EPSS
0.0%
2020 CWE-274 1 PoC

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

CVE-2020-1054
🔥 KEV Windows Windows
7.8
HIGH
EPSS
81.6%
2020 6 PoCs

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.

CVE-2020-1464
🔥 KEV Windows 10 Version 1803 Windows
7.8
HIGH
EPSS
7.9%
2020 3 PoCs

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

CVE-2020-17136
Windows 10 Version 20H2 Cloud Windows
7.8
HIGH
EPSS
85.6%
2020 2 PoCs

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2020-0787
🔥 KEV Windows Windows
7.8
HIGH
EPSS
61.8%
2020 3 PoCs

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

CVE-2020-7346
McAfee Data Loss Prevention (DLP) Endpoint for Windows Windows
7.8
HIGH
EPSS
0.1%
2020 CWE-59 2 PoCs

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.

CVE-2020-1377
Windows 10 Version 1803 Web Windows
7.8
HIGH
EPSS
0.2%
2020 1 PoC

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly handles objects in memory.

CVE-2020-1147
🔥 KEV Microsoft SharePoint Enterprise Server Windows
7.8
HIGH
EPSS
93.4%
2020 3 PoCs

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

CVE-2020-16939
Windows 10 Version 1803 Windows
7.8
HIGH
EPSS
19.9%
2020 1 PoC

<p>An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p> <p>The security update addresses the vulnerability by correcting how Group Policy checks access.</p>

CVE-2020-1115
Windows 10 Version 1803 Web Windows
7.8
HIGH
EPSS
0.3%
2020 1 PoC

<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File System (CLFS)</a> driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p> <p>The security update addresses the vulnerability by correcting how CLFS handles objects in m

CVE-2020-0986
🔥 KEV Windows Windows
7.8
HIGH
EPSS
16.5%
2020 1 PoC

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

CVE-2020-0938
🔥 KEV Windows Windows
7.8
HIGH
EPSS
87.0%
2020 1 PoC

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.

CVE-2020-1337
Windows 10 Version 2004 Windows
7.8
HIGH
EPSS
55.3%
2020 8 PoCs

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application. The update addresses the vulnerability by correcting how the Windows Print Spooler Compo