Vulnerabilidades do Microsoft Windows 10 21h2

CVE-2024-35250 Alta · 7.8 KEV Urgente · 74 Exploit público CWE-822 11/06/2024

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-30088 Alta · 7.0 KEV Urgente · 82 Exploit público Ransomware CWE-367 11/06/2024

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30051 Alta · 7.8 KEV Urgente · 71 Exploit público Ransomware CWE-787 14/05/2024

Microsoft DWM Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30040 Alta · 8.8 KEV Alta · 55 CWE-20 14/05/2024

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2024-29988 Alta · 8.8 KEV Alta · 62 Exploit público CWE-693 09/04/2024

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2024-26169 Alta · 7.8 KEV Urgente · 71 Exploit público Ransomware CWE-269 12/03/2024

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2024-21412 Alta · 8.1 KEV Urgente · 72 Exploit público Ransomware CWE-693 13/02/2024

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

CVE-2024-21351 Alta · 7.6 KEV Alta · 56 CWE-94 13/02/2024

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2024-21338 Alta · 7.8 KEV Urgente · 80 Exploit público Ransomware CWE-822 13/02/2024

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36424 Alta · 7.8 KEV Alta · 61 Exploit público CWE-125 14/11/2023

Microsoft Windows Out-of-Bounds Read Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36036 Alta · 7.8 KEV Alta · 56 CWE-787 14/11/2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36033 Alta · 7.8 KEV Alta · 55 CWE-119 14/11/2023

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36025 Alta · 8.8 KEV Alta · 62 Exploit público 14/11/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-36563 Média · 5.5 KEV Alta · 53 CWE-20 10/10/2023

Microsoft WordPad Information Disclosure Vulnerability

CVE-2023-44487 Alta · 7.5 KEV Urgente · 73 Exploit público CWE-400 10/10/2023

HTTP/2 Rapid Reset: negação de serviço no protocolo

O protocolo HTTP/2 permite uma negação de serviço (consumo de recursos do servidor) porque o cancelamento de requisições pode reiniciar muitos streams rapidamente, conforme explorado na natureza entre agosto e outubro de 2023.

CVE-2023-36802 Alta · 7.8 KEV Alta · 62 Exploit público CWE-416 12/09/2023

Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVE-2023-36884 Alta · 7.5 KEV Urgente · 72 Exploit público Ransomware CWE-362 11/07/2023

Microsoft Windows Search Remote Code Execution Vulnerability

Windows Search Remote Code Execution Vulnerability

CVE-2023-36874 Alta · 7.8 KEV Urgente · 74 Exploit público CWE-59 11/07/2023

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2023-32049 Alta · 8.8 KEV Alta · 55 11/07/2023

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-32046 Alta · 7.8 KEV Alta · 55 11/07/2023

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVE-2023-29360 Alta · 8.4 KEV Alta · 62 Exploit público CWE-822 13/06/2023

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2023-28252 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware CWE-787 11/04/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-28229 Alta · 7.0 KEV Alta · 59 Exploit público CWE-591 11/04/2023

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2023-24880 Média · 4.4 KEV Alta · 63 Ransomware CWE-863 14/03/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-21823 Alta · 7.8 KEV Alta · 61 Exploit público CWE-190 14/02/2023

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability