Filtered by vendor Microsoft Subscriptions
Filtered by product Windows Rt 8.1 Subscriptions
Total 2403 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-26887 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2024-11-19 7.8 High
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p> <p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p> <p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>
CVE-2021-24103 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-19 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-24083 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-19 7.8 High
Windows Address Book Remote Code Execution Vulnerability
CVE-2021-1734 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-19 7.5 High
Windows Remote Procedure Call Information Disclosure Vulnerability
CVE-2021-1706 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-19 7.3 High
Windows LUAFV Elevation of Privilege Vulnerability
CVE-2021-1657 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-19 7.8 High
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2021-31959 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-19 6.4 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2021-31183 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-19 7.5 High
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-33749 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1809 and 15 more 2024-11-19 8.8 High
Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33773 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2024-11-19 7.8 High
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2021-34498 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-19 7.8 High
Windows GDI Elevation of Privilege Vulnerability
CVE-2021-34446 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2024-11-19 8 High
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2021-34459 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2024-11-19 7.8 High
Windows AppContainer Elevation Of Privilege Vulnerability
CVE-2021-26426 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-18 7 High
Windows User Account Profile Picture Elevation of Privilege Vulnerability
CVE-2021-34480 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2024-11-18 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2021-36959 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-18 5.5 Medium
Windows Authenticode Spoofing Vulnerability
CVE-2021-38633 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-18 7.8 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-42275 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2024-11-18 8.8 High
Microsoft COM for Windows Remote Code Execution Vulnerability
CVE-2020-0911 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-18 7.8 High
<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.</p> <p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p> <p>The update addresses the vulnerability by correcting the way the Windows Modules Installer handles objects in memory.</p>
CVE-2020-0998 1 Microsoft 14 Windows 10, Windows 10 1607, Windows 10 1803 and 11 more 2024-11-18 7.8 High
<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p> <p>The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.</p>