| CVE-2023-28229 Known exploited | High 7.0 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft | Apr 11, 2023 |
| CVE-2023-21823 Known exploited | High 7.8 | Windows Graphics Component Remote Code Execution Vulnerability Assigned by microsoft | Feb 14, 2023 |
| CVE-2023-23376 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Feb 14, 2023 |
| CVE-2023-21674 Known exploited | High 8.8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Assigned by microsoft | Jan 10, 2023 |
| CVE-2022-41128 Known exploited | High 8.8 | Windows Scripting Languages Remote Code Execution Vulnerability Assigned by microsoft | Nov 9, 2022 |
| CVE-2022-41125 Known exploited | High 7.8 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability Assigned by microsoft | Nov 9, 2022 |
| CVE-2022-41073 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Nov 9, 2022 |
| CVE-2022-41033 Known exploited | High 7.8 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft | Oct 11, 2022 |
| CVE-2022-38028 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Oct 11, 2022 |
| CVE-2022-37969 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 13, 2022 |
| CVE-2022-34713 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Aug 9, 2022 |
| CVE-2022-22047 Known exploited | High 7.8 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft | Jul 12, 2022 |
| CVE-2022-30190 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Jun 1, 2022 |
| CVE-2022-26925 Known exploited | High 8.1 | Windows LSA Spoofing Vulnerability Assigned by microsoft | May 10, 2022 |
| CVE-2022-26923 Known exploited | High 8.8 | Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft | May 10, 2022 |
| CVE-2022-26904 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-24521 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-22718 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-21999 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-21919 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Jan 11, 2022 |
| CVE-2021-43226 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Dec 15, 2021 |
| CVE-2021-42287 Known exploited | High 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft | Nov 10, 2021 |
| CVE-2021-42278 Known exploited | High 7.5 | Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft | Nov 10, 2021 |
| CVE-2021-41379 Known exploited | Medium 5.5 | Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft | Nov 10, 2021 |
| CVE-2021-40449 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Oct 13, 2021 |
| CVE-2021-40444 Known exploited | High 8.8 | Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-36942 Known exploited | High 7.5 | Windows LSA Spoofing Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34484 Known exploited | High 7.8 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34448 Known exploited | Medium 6.8 | Scripting Engine Memory Corruption Vulnerability Assigned by microsoft | Jul 16, 2021 |
| CVE-2021-33771 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-31979 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34527 Known exploited | High 8.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jul 2, 2021 |
| CVE-2021-33742 Known exploited | High 7.5 | Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31956 Known exploited | High 7.8 | Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31201 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31199 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-1675 Known exploited | High 7.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2020-17087 Known exploited | High 7.8 | Windows Kernel Local Elevation of Privilege Vulnerability Assigned by microsoft | Nov 11, 2020 |
| CVE-2020-1472 Known exploited | Medium 5.5 | Netlogon Elevation of Privilege Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-1464 Known exploited | High 7.8 | Windows Spoofing Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-1350 Known exploited | Critical 10.0 | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'. Assigned by microsoft | Jul 14, 2020 |
| CVE-2020-1040 Known exploited | Critical 9.0 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX… Assigned by microsoft | Jul 14, 2020 |
| CVE-2020-0986 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Jun 9, 2020 |
| CVE-2020-1054 Known exploited | High 7.0 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | May 21, 2020 |
| CVE-2020-1027 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1020 Known exploited | High 8.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0938 Known exploited | High 7.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0787 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… Assigned by microsoft | Mar 12, 2020 |
| CVE-2020-0683 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Assigned by microsoft | Feb 11, 2020 |
