Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,604

Export CSV
CVE-2019-1053

Windows Shell Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the victim system. The security update addresses the vulnerability by correctly validating folder shortcuts.

CVSS 3.1 · 6.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 Windows 10 1507 Windows 10 1607 and 13 more
CVE-2019-1049

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

CVSS 3.1 · 4.7 Medium EPSS 4.3% KEV · Not listed
Vendors
Microsoft
Products
Windows 7 Windows Server 2008 Windows Server 2008 R2 and 1 more
CVE-2019-1048

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

CVSS 3.1 · 4.7 Medium EPSS 4.3% KEV · Not listed
Vendors
Microsoft
Products
Windows 7 Windows Server 2008 Windows Server 2008 R2 and 1 more
CVE-2019-1047

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

CVSS 3.1 · 4.7 Medium EPSS 4.3% KEV · Not listed
Vendors
Microsoft
Products
Windows 7 Windows Server 2008 Windows Server 2008 R2 and 1 more
CVE-2019-1046

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.

CVSS 3.1 · 4.7 Medium EPSS 4.3% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 Windows 10 1507 Windows 10 1607 and 13 more