Microsoft

Windows

91 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-32157

Medienbericht
  • EPSS 0.13%
  • Veröffentlicht 14.04.2026 16:57:26
  • Zuletzt bearbeitet 07.05.2026 19:57:08

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.8

CVE-2026-24292

  • EPSS 0.06%
  • Veröffentlicht 10.03.2026 17:04:43
  • Zuletzt bearbeitet 13.03.2026 19:02:15

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-24290

  • EPSS 0.03%
  • Veröffentlicht 10.03.2026 17:04:42
  • Zuletzt bearbeitet 13.03.2026 19:14:28

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-24287

  • EPSS 0.08%
  • Veröffentlicht 10.03.2026 17:04:41
  • Zuletzt bearbeitet 13.03.2026 19:23:33

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.

5.5

CVE-2026-30785

Exploit
  • EPSS 0.01%
  • Veröffentlicht 05.03.2026 16:16:19
  • Zuletzt bearbeitet 25.03.2026 15:47:08

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb_common on Windows, MacOS, Linux (Pas...

5.5

CVE-2026-2636

  • EPSS 0.06%
  • Veröffentlicht 25.02.2026 18:57:02
  • Zuletzt bearbeitet 15.04.2026 00:35:42

This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an u...

7.4

CVE-2025-59033

  • EPSS 0.05%
  • Veröffentlicht 08.09.2025 00:00:00
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed (TBS) part of the code signer certificate are properly blocked, but entries that specify the s...

7.4

CVE-2022-50238

  • EPSS 0.05%
  • Veröffentlicht 08.09.2025 00:00:00
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expect...

7.8

CVE-2025-9491

Medienbericht
  • EPSS 0.6%
  • Veröffentlicht 26.08.2025 16:25:15
  • Zuletzt bearbeitet 05.11.2025 21:15:36

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vul...

8.8

CVE-2025-34091

  • EPSS 0%
  • Veröffentlicht 02.07.2025 19:25:27
  • Zuletzt bearbeitet 24.07.2025 07:15:53

Rejected reason: Neither filed by Chrome nor a valid security vulnerability.