Search CVEs

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.