Vulnerability index

Browse CVEs

232 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Privilege ManagementCWE-269 × clear
Malware Protection Engine HIGH 7.8
CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "Shield…

No fix yet
Fix from $4,900 2026-08-14
App Installer HIGH 7.8
CVE-2026-68821

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.

Fix: 1.30.80+
Fix from $4,900 2026-08-11
Windows 10 1607 HIGH 7.8
CVE-2026-50391

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1809 HIGH 7.8
CVE-2026-50343

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.9020 / 10.0.19044.7548+
Fix from $1,950 2026-07-14
Windows 11 24h2 MEDIUM 5.5
CVE-2026-50295

Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.

Fix: 10.0.26100.8875 / 10.0.26100.33158+
Fix from $1,600 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-49176

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Global Secure Access HIGH 7.5
CVE-2026-23663

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

No fix yet
Fix from $1,950 2026-05-22
Dynamics 365 Customer Insights CRITICAL 9.9
CVE-2026-33821

Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2026-05-12
Windows 10 1607 MEDIUM 5.5
CVE-2026-32212

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose inform…

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,600 2026-04-14
Windows 10 21h2 MEDIUM 5.5
CVE-2026-32181

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Fix: 10.0.19044.7184 / 10.0.19045.7184+
Fix from $1,600 2026-04-14
Windows 10 1607 HIGH 7.8
CVE-2026-21533 KEV

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
Edge Chromium HIGH 7.1
CVE-2026-21223

Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.

Fix: 144.0.3719.82+
Fix from $1,950 2026-01-16
Windows 10 1607 HIGH 7.8
CVE-2025-59514

Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8594 / 10.0.17763.8027+
Fix from $1,950 2025-11-11
Azure Playfab CRITICAL 9.8
CVE-2025-59247

Azure PlayFab Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2025-10-09
Sql Server 2016 HIGH 8.8
CVE-2025-49758

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privilege…

Fix: 13.0.6465.1 / 13.0.7060.1+
Fix from $1,950 2025-08-12
Windows 10 1507 HIGH 7.8
CVE-2025-47955

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 8.4
CVE-2025-33067

Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Sharepoint Server HIGH 7.8
CVE-2025-29976

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally.

Fix: 16.0.18526.20286+
Fix from $1,950 2025-05-13
Windows 10 1507 HIGH 7.0
CVE-2025-27468

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Autoupdate HIGH 7.8
CVE-2025-29800

Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

Fix: 4.78+
Fix from $1,950 2025-04-08
Azure Agent MEDIUM 6.7
CVE-2025-21199

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.

Fix: 2.0.9940.0 / 9.30+
Fix from $1,600 2025-03-11
Autoupdate HIGH 7.8
CVE-2025-21360

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Fix: 4.76+
Fix from $1,950 2025-01-14
Windows 11 22h2 HIGH 7.5
CVE-2025-21343

Windows Web Threat Defense User Service Information Disclosure Vulnerability

Fix: 10.0.22621.4751 / 10.0.22631.4751+
Fix from $1,950 2025-01-14
Windows 10 1507 HIGH 7.8
CVE-2025-21287

Windows Installer Elevation of Privilege Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+
Fix from $1,950 2025-01-14
Partner Center CRITICAL 9.8
CVE-2024-49035 KEV

An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2024-11-26
Windows 10 1507 HIGH 7.8
CVE-2024-38014 KEVEPSS 6%

Windows Installer Elevation of Privilege Vulnerability

Fix: 10.0.10240.20766 / 10.0.14393.7336+
Fix from $1,950 2024-09-10
Sql Server 2016 CRITICAL 9.8
CVE-2024-37980

Microsoft SQL Server Elevation of Privilege Vulnerability

Fix: 13.0.6445.1 / 13.0.7040.1+
Fix from $2,300 2024-09-10
Defender For Iot CRITICAL 9.9
CVE-2024-38089

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Fix: 24.1.4+
Fix from $2,300 2024-07-09
Windows Server 2022 23h2 HIGH 8.8
CVE-2024-30007

Microsoft Brokering File System Elevation of Privilege Vulnerability

Fix: 10.0.25398.887+
Fix from $1,950 2024-05-14
Windows 10 21h2 HIGH 7.8
CVE-2024-29052

Windows Storage Elevation of Privilege Vulnerability

Fix: 10.0.19044.4291 / 10.0.19045.4291+
Fix from $1,950 2024-04-09