Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.
NVD data is used under its public data terms. This service is not endorsed or certified by NVD.Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
The CVSS severity warrants an early asset and exposure review.Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
The CVSS severity warrants an early asset and exposure review.