An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Published 2018-06-14 · Modified

8.8EPSS 0.012

CVE-2025-21417

Windows Telephony Service Remote Code Execution Vulnerability

Published 2025-01-14 · Analyzed

8.8EPSS 0.012

CVE-2017-8503

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka "Microsoft Edge Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8642.

Published 2017-08-08 · Modified

8.8EPSS 0.012

CVE-2024-28899

Secure Boot Security Feature Bypass Vulnerability

Published 2024-07-09 · Modified

8.8EPSS 0.012

CVE-2023-21686

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Published 2023-02-14 · Modified

8.8EPSS 0.012

CVE-2024-38053

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Published 2024-07-09 · Modified

8.8EPSS 0.011

CVE-2025-21339

Windows Telephony Service Remote Code Execution Vulnerability

Published 2025-01-14 · Analyzed

8.8EPSS 0.011

CVE-2025-21413

Windows Telephony Service Remote Code Execution Vulnerability

Published 2025-01-14 · Analyzed

8.8EPSS 0.011

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

Published 2025-01-14 · Analyzed

8.8EPSS 0.011

CVE-2025-21411

Windows Telephony Service Remote Code Execution Vulnerability

Published 2025-01-14 · Analyzed

8.8EPSS 0.011

CVE-2025-33066

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published 2025-06-10 · Analyzed

8.8EPSS 0.011

CVE-2021-26865

Windows Container Execution Agent Elevation of Privilege Vulnerability

Published 2021-03-11 · Modified

8.8EPSS 0.011

CVE-2023-35387

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Published 2023-08-08 · Modified

8.8EPSS 0.011

CVE-2023-21695

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

Published 2023-02-14 · Modified

8.8EPSS 0.010

CVE-2025-64678

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published 2025-12-09 · Analyzed

8.8EPSS 0.010

CVE-2022-22026

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Published 2022-07-12 · Modified

8.8EPSS 0.010

CVE-2025-29840

Windows Media Remote Code Execution Vulnerability

Published 2025-05-13 · Analyzed

8.8EPSS 0.010

CVE-2025-49757

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published 2025-08-12 · Analyzed

8.8EPSS 0.010

CVE-2024-43518

Windows Telephony Server Remote Code Execution Vulnerability

Published 2024-10-08 · Analyzed

8.8EPSS 0.010

CVE-2017-8590

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability".

Published 2017-07-11 · Modified

8.8EPSS 0.010

CVE-2025-48817

Remote Desktop Client Remote Code Execution Vulnerability

Published 2025-07-08 · Analyzed

8.8EPSS 0.010

CVE-2025-49657

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published 2025-07-08 · Analyzed

8.8EPSS 0.010

CVE-2020-16891

Windows Hyper-V Remote Code Execution Vulnerability