| CVE-2023-21674 Known exploited | High 8.8 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Assigned by microsoft | Jan 10, 2023 |
| CVE-2022-41033 Known exploited | High 7.8 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Assigned by microsoft | Oct 11, 2022 |
| CVE-2022-38028 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Oct 11, 2022 |
| CVE-2022-37969 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 13, 2022 |
| CVE-2022-34713 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Aug 9, 2022 |
| CVE-2022-22047 Known exploited | High 7.8 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft | Jul 12, 2022 |
| CVE-2022-30190 Known exploited | High 7.8 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft | Jun 1, 2022 |
| CVE-2022-26925 Known exploited | High 8.1 | Windows LSA Spoofing Vulnerability Assigned by microsoft | May 10, 2022 |
| CVE-2022-26923 Known exploited | High 8.8 | Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft | May 10, 2022 |
| CVE-2022-26904 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-24521 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Apr 15, 2022 |
| CVE-2022-22718 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-21999 Known exploited | High 7.8 | Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft | Feb 9, 2022 |
| CVE-2022-21919 Known exploited | High 7.0 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Jan 11, 2022 |
| CVE-2021-43226 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Dec 15, 2021 |
| CVE-2021-41379 Known exploited | Medium 5.5 | Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft | Nov 10, 2021 |
| CVE-2021-40449 Known exploited | High 7.8 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | Oct 13, 2021 |
| CVE-2021-40444 Known exploited | High 8.8 | Microsoft MSHTML Remote Code Execution Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-36955 Known exploited | High 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft | Sep 15, 2021 |
| CVE-2021-34484 Known exploited | High 7.8 | Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft | Aug 12, 2021 |
| CVE-2021-34448 Known exploited | Medium 6.8 | Scripting Engine Memory Corruption Vulnerability Assigned by microsoft | Jul 16, 2021 |
| CVE-2021-33771 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-31979 Known exploited | High 7.8 | Windows Kernel Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2021 |
| CVE-2021-34527 Known exploited | High 8.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jul 2, 2021 |
| CVE-2021-33742 Known exploited | High 7.5 | Windows MSHTML Platform Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31956 Known exploited | High 7.8 | Windows NTFS Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31201 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-31199 Known exploited | Medium 5.2 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2021-1675 Known exploited | High 7.8 | Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft | Jun 8, 2021 |
| CVE-2020-17087 Known exploited | High 7.8 | Windows Kernel Local Elevation of Privilege Vulnerability Assigned by microsoft | Nov 11, 2020 |
| CVE-2020-1464 Known exploited | High 7.8 | Windows Spoofing Vulnerability Assigned by microsoft | Aug 17, 2020 |
| CVE-2020-0986 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Jun 9, 2020 |
| CVE-2020-1054 Known exploited | High 7.0 | Win32k Elevation of Privilege Vulnerability Assigned by microsoft | May 21, 2020 |
| CVE-2020-1027 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-1020 Known exploited | High 8.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0938 Known exploited | High 7.8 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format… Assigned by microsoft | Apr 15, 2020 |
| CVE-2020-0787 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service… Assigned by microsoft | Mar 12, 2020 |
| CVE-2020-0683 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Assigned by microsoft | Feb 11, 2020 |
| CVE-2019-1458 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Dec 10, 2019 |
| CVE-2019-1405 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1388 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… Assigned by microsoft | Nov 12, 2019 |
| CVE-2019-1315 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. Assigned by microsoft | Oct 10, 2019 |
| CVE-2019-1215 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1214 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Priv… Assigned by microsoft | Sep 11, 2019 |
| CVE-2019-1130 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 29, 2019 |
| CVE-2019-0880 Known exploited | High 7.8 | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. Assigned by microsoft | Jul 15, 2019 |
| CVE-2019-0903 Known exploited | High 8.8 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-0863 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Assigned by microsoft | May 16, 2019 |
| CVE-2019-0859 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
| CVE-2019-0803 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Assigned by microsoft | Apr 9, 2019 |
