Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.
NVD data is used under its public data terms. This service is not endorsed or certified by NVD.Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.
The CVSS severity warrants an early asset and exposure review.Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
FIRST EPSS indicates an elevated probability of exploitation.