1246 vulnerabilidades · Windows Orden: CVSS EPSS Año ID
CVE-2023-3513
Razer Central Windows
7.8
HIGH
EPSS
0.1%
2023 CWE-269 1 PoC

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

CVE-2023-20178
Cisco Secure Client Networking Windows
7.8
HIGH
EPSS
27.7%
2023 CWE-276 3 PoCs

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed after a successful VPN connection is established. This vulnerability exists because improper permissions are assigned to a temporary directory that is created during the update process. An attacker could exploit this vulnerability by abusing a specific function of the Windows installer process. A succe

CVE-2023-33990
SAP SQL Anywhere Database Windows
7.8
HIGH
EPSS
0.0%
2023 CWE-732 1 PoC

SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An attacker with low privileged account and access to the local system can write into the shared memory objects. This can be leveraged by an attacker to perform a Denial of Service. Further, an attacker might be able to modify sensitive data in shared memory objects.This issue only affects SAP SQL Anywhere on Windows. Other platforms are not impacted.

CVE-2023-36407
Windows Server 2022 Windows
7.8
HIGH
EPSS
15.2%
2023 CWE-20 2 PoCs

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-21774
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
2.0%
2023 CWE-416 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-32046
🔥 KEV Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
42.7%
2023 1 PoC

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVE-2023-49694
NETGEAR ProSAFE Network Management System Web Windows
7.8
HIGH
EPSS
0.1%
2023 CWE-284 1 PoC

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM.

CVE-2023-3514
Razer Central Windows
7.8
HIGH
EPSS
0.1%
2023 CWE-269 1 PoC

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

CVE-2023-35359
Windows 10 Version 1507 Windows
7.8
HIGH
EPSS
9.9%
2023 CWE-23 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-29336
🔥 KEV Windows 10 Version 1507 Windows
7.8
HIGH
EPSS
79.5%
2023 CWE-416 2 PoCs

Win32k Elevation of Privilege Vulnerability

CVE-2023-21773
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
2.0%
2023 CWE-416 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-21823
🔥 KEV Microsoft Office for Android Windows
7.8
HIGH
EPSS
5.0%
2023 CWE-190 1 PoC

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2023-35357
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
0.2%
2023 CWE-125 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-23420
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
0.3%
2023 CWE-416 2 PoCs

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-41772
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
19.5%
2023 CWE-284 1 PoC

Win32k Elevation of Privilege Vulnerability

CVE-2023-21675
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
1.0%
2023 CWE-843 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-23421
Windows 10 Version 1809 Windows
7.8
HIGH
EPSS
1.0%
2023 CWE-416 1 PoC

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-29343
Windows Sysmon Windows
7.8
HIGH
EPSS
15.6%
2023 CWE-59 1 PoC

SysInternals Sysmon for Windows Elevation of Privilege Vulnerability