| CVE-2021-40449 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Oct 13, 2021 |
| CVE-2021-40444 Known exploited | High 8.8 | Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-36948 Known exploited | High 7.8 | Windows Update Medic Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-36942 Known exploited | High 7.5 | Windows LSA Spoofing Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34486 Known exploited | High 7.8 | Windows Event Tracing Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34484 Known exploited | High 7.8 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34448 Known exploited | Medium 6.8 | Scripting Engine Memory Corruption Vulnerability Assigned by microsoft | Jul 16, 2021 |
| CVE-2021-33771 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-31979 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34527 Known exploited | High 8.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jul 2, 2021 |
| CVE-2021-33742 Known exploited | High 7.5 | Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31956 Known exploited | High 7.8 | Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31955 Known exploited | Medium 5.5 | Windows Kernel Information Disclosure Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31201 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31199 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-1675 Known exploited | High 7.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-28310 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Apr 13, 2021 |
| CVE-2021-1732 Known exploited | High 7.8 | Windows Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Feb 25, 2021 |
| CVE-2020-17087 Known exploited | High 7.8 | Windows Kernel Local Elevation of Privilege Vulnerability Assigned by microsoft | Nov 11, 2020 |
| CVE-2020-1472 Known exploited | Medium 5.5 | Netlogon Elevation of Privilege Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-1464 Known exploited | High 7.8 | Windows Spoofing Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-1350 Known exploited | Critical 10.0 | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'. Assigned by microsoft | Jul 14, 2020 |
| CVE-2020-0986 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Jun 9, 2020 |
| CVE-2020-1054 Known exploited | High 7.0 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | May 21, 2020 |
| CVE-2020-1027 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1020 Known exploited | High 8.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0938 Known exploited | High 7.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0787 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… Assigned by microsoft | Mar 12, 2020 |
| CVE-2020-0683 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Assigned by microsoft | Feb 11, 2020 |
| CVE-2020-0638 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim sys… Assigned by microsoft | Jan 14, 2020 |
| CVE-2020-0601 Known exploited | High 8.1 | A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code… Assigned by microsoft | Jan 14, 2020 |
| CVE-2019-1405 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1388 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1385 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability,… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1322 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Oct 10, 2019 |
| CVE-2019-1315 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. Assigned by microsoft | Oct 10, 2019 |
| CVE-2019-1253 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on th… Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1215 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1214 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Priv… Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1130 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 29, 2019 |
| CVE-2019-1129 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 29, 2019 |
| CVE-2019-0880 Known exploited | High 7.8 | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 15, 2019 |
| CVE-2019-1069 Known exploited | High 7.8 | Task Scheduler Elevation of Privilege Vulnerability Assigned by microsoft | Jun 12, 2019 |
| CVE-2019-1064 Known exploited | High 7.8 | Windows Elevation of Privilege Vulnerability Assigned by microsoft | Jun 12, 2019 |
| CVE-2019-0903 Known exploited | High 8.8 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-0863 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-0859 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0841 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0803 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
