Filtered by vendor Microsoft Subscriptions
Filtered by product Windows 10 Subscriptions
Total 4233 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-49762 1 Microsoft 29 Windows, Windows 10, Windows 10 1507 and 26 more 2026-02-13 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-49743 1 Microsoft 29 Windows, Windows 10, Windows 10 1507 and 26 more 2026-02-13 6.7 Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49751 1 Microsoft 25 Hyper-v, Server, Windows and 22 more 2026-02-13 6.8 Medium
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
CVE-2022-24488 1 Microsoft 9 Windows 10, Windows 10 20h2, Windows 10 21h1 and 6 more 2025-12-16 7.8 High
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2022-26807 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-12-16 7 High
Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2021-38638 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-12-16 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2021-34536 1 Microsoft 11 Windows 10, Windows 10 1507, Windows 10 1607 and 8 more 2025-12-16 7.8 High
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-34487 1 Microsoft 10 Windows 10, Windows 10 1607, Windows 10 1809 and 7 more 2025-12-16 7 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2022-29126 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2025-12-16 7 High
Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
CVE-2022-29106 1 Microsoft 5 Windows 10, Windows Server 2016, Windows Server 2019 and 2 more 2025-12-16 7 High
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
CVE-2022-26917 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-12-16 7.8 High
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2022-26916 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-12-16 7.8 High
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2022-24494 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-12-16 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-30165 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2025-12-16 8.8 High
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-24549 1 Microsoft 14 Windows 10, Windows 10 1507, Windows 10 1607 and 11 more 2025-12-16 7.8 High
Windows AppX Package Manager Elevation of Privilege Vulnerability
CVE-2022-24498 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2025-12-09 6.5 Medium
Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2018-4878 6 Adobe, Apple, Google and 3 more 11 Flash Player, Macos, Chrome Os and 8 more 2025-11-18 7.8 High
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.
CVE-2018-5002 6 Adobe, Apple, Google and 3 more 12 Flash Player, Flash Player Desktop Runtime, Mac Os X and 9 more 2025-11-18 7.8 High
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2016-4171 8 Adobe, Apple, Google and 5 more 15 Flash Player, Mac Os X, Macos and 12 more 2025-11-17 7.8 High
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CVE-2016-1019 6 Adobe, Apple, Google and 3 more 14 Air Desktop Runtime, Air Sdk, Air Sdk \& Compiler and 11 more 2025-11-17 7.8 High
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.