| CVE-2018-8639 Known exploited | High 8.4 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | Dec 12, 2018 |
| CVE-2018-8611 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, W… Assigned by microsoft | Dec 12, 2018 |
| CVE-2019-0543 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows S… Assigned by microsoft | Jan 8, 2019 |
| CVE-2019-0703 Known exploited | Medium 6.5 | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. Assigned by microsoft | Apr 8, 2019 |
| CVE-2019-0808 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0803 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0859 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0863 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-0708 Known exploited Healthcare | Critical 9.8 | A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends speciall… Assigned by microsoft | May 16, 2019 |
| CVE-2019-0903 Known exploited | High 8.8 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-1132 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 29, 2019 |
| CVE-2019-1215 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1214 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Priv… Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1315 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. Assigned by microsoft | Oct 10, 2019 |
| CVE-2019-1388 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1405 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1458 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Dec 10, 2019 |
| CVE-2020-0683 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Assigned by microsoft | Feb 11, 2020 |
| CVE-2020-0787 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… Assigned by microsoft | Mar 12, 2020 |
| CVE-2020-0938 Known exploited | High 7.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1020 Known exploited | High 8.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1027 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1054 Known exploited | High 7.0 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | May 21, 2020 |
| CVE-2020-1464 Known exploited | High 7.8 | Windows Spoofing Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-17087 Known exploited | High 7.8 | Windows Kernel Local Elevation of Privilege Vulnerability Assigned by microsoft | Nov 11, 2020 |
| CVE-2021-1675 Known exploited | High 7.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31201 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31199 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31956 Known exploited | High 7.8 | Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-33742 Known exploited | High 7.5 | Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31979 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34448 Known exploited | Medium 6.8 | Scripting Engine Memory Corruption Vulnerability Assigned by microsoft | Jul 16, 2021 |
| CVE-2021-34484 Known exploited | High 7.8 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-40444 Known exploited | High 8.8 | Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-40449 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Oct 13, 2021 |
| CVE-2021-41379 Known exploited | Medium 5.5 | Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft | Nov 10, 2021 |
| CVE-2021-43226 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Dec 15, 2021 |
| CVE-2022-21919 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Jan 11, 2022 |
| CVE-2022-21999 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-22718 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-24521 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-26904 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-26925 Known exploited | High 8.1 | Windows LSA Spoofing Vulnerability Assigned by microsoft | May 10, 2022 |
| CVE-2022-30190 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Jun 1, 2022 |
| CVE-2022-22047 Known exploited | High 7.8 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft | Jul 12, 2022 |
| CVE-2022-34713 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Aug 9, 2022 |
| CVE-2022-37969 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 13, 2022 |
| CVE-2022-41033 Known exploited | High 7.8 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft | Oct 11, 2022 |
| CVE-2022-41128 Known exploited | High 8.8 | Windows Scripting Languages Remote Code Execution Vulnerability Assigned by microsoft | Nov 9, 2022 |
