Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

r2-sp1
3
sp2
1

Microsoft Windows 7Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Risk 59
Severity
6.9
AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

First published (updated )
CVE-2022-22023

Microsoft Windows Server 2012 R2Windows USB Hub Driver Remote Code Execution Vulnerability

Risk 47
Severity
6.8
EPSS
0.05%
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows USB Hub Driver Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21429

Microsoft Windows Server 2012 R2Windows rndismp6.sys Remote Code Execution Vulnerability

Risk 62
Severity
6.8
Input Validation
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows rndismp6.sys Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26253

Microsoft Windows Server 2012 R2Windows rndismp6.sys Remote Code Execution Vulnerability

Risk 62
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows rndismp6.sys Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26252

Microsoft Windows Server 2025Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Risk 65
Severity
6.8
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43637

Microsoft Windows Server 2012 R2Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Risk 65
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43643

Microsoft Windows Server 2012 R2Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Risk 65
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43634

Microsoft Windows Server 2025Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Risk 65
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43638

Microsoft Windows Server 2012 R2Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Risk 65
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-43449

Microsoft Windows 10Windows Hyper-V Denial of Service Vulnerability

Risk 39
Severity
6.8
Input Validation
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0710, CVE-2019-0711.

1 / 3
First published (updated )
CVE-2019-0713

Microsoft Windows Server 2012 R2Windows Remote Desktop Security Feature Bypass Vulnerability

Risk 51
Severity
6.8
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Windows Remote Desktop Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-32043

Microsoft Windows 10Local Security Authority Subsystem Service Denial of Service Vulnerability

Risk 38
Severity
6.8
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Local Security Authority Subsystem Service Denial of Service Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2019-0972

Microsoft Windows 7BitLocker Security Feature Bypass Vulnerability

Risk 62
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

BitLocker Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-21563

Microsoft Windows Server 2012 R2Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Risk 62
Severity
6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-35629

Microsoft Windows Server 2012 R2Proxy Driver Spoofing Vulnerability

Risk 77
Severity
6.7
Exploited
Command Injection
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Proxy Driver Spoofing Vulnerability

First published (updated )
CVE-2024-26234

Microsoft Windows Server 2012 R2Active Template Library Elevation of Privilege Vulnerability

Risk 60
Severity
6.7
Use After Free
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Active Template Library Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-32055

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28256

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28255

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Race Condition
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28278

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Race Condition, Use After Free
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28305

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Race Condition, Use After Free
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28308

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Race Condition, Use After Free
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28307

Microsoft Windows Server 2012 R2Windows DNS Server Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Race Condition, Use After Free
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows DNS Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28306

Microsoft Windows Server 2012 R2Windows Domain Name Service Remote Code Execution Vulnerability

Risk 61
Severity
6.6
Use After Free
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Domain Name Service Remote Code Execution Vulnerability

First published (updated )
CVE-2023-28223

Microsoft Windows 7Windows Group Policy Elevation of Privilege Vulnerability

Risk 61
Severity
6.6
Race Condition
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Group Policy Elevation of Privilege Vulnerability

First published (updated )
CVE-2022-30205

Microsoft Windows 7Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Risk 59
Severity
6.6
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability.

1 / 2
First published (updated )
CVE-2022-38032

Microsoft Windows 7Windows Boot Manager Security Feature Bypass Vulnerability

Risk 59
Severity
6.6
AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Boot Manager Security Feature Bypass Vulnerability

First published (updated )
CVE-2023-21560

Microsoft Windows 7BitLocker Security Feature Bypass Vulnerability

Risk 47
Severity
6.6
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

BitLocker Security Feature Bypass Vulnerability

First published (updated )
CVE-2022-22048

redhat/kernel-rtLast updated 25 April 2025

Risk 39
Severity
6.5
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

A flaw was found in hw. The Branch History Injection (BHI) describes a specific form of intra-mode BTI. This flaw allows an unprivileged attacker to manipulate the branch history before transitioning to supervisor or VMX root mode. This issue is an effort to cause an indirect branch predictor to select a specific predictor entry for an indirect branch, and a disclosure gadget at the predicted target will transiently execute. This execution is possible since the relevant branch history may contain branches taken in previous security contexts, and in particular, in other predictor modes.

1 / 6

Remedy

Disabling unprivileged eBPF effectively mitigates the known attack vectors for exploiting intra-mode branch injections attacks. The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. For the Red Hat Enterprise Linux 7, the eBPF for unprivileged users is always disabled. For the Red Hat Enterprise Linux 8 to confirm the current state, inspect the sysctl with the command: # cat /proc/sys/kernel/unprivileged_bpf_disabled The setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw. Continue to enable SMEP and Enhanced IBRS. This is the default setting on eligible CPUs.

Remedy

To mitigate the primary known attack vector, disable unprivileged eBPF: $ sudo sysctl kernel.unprivileged_bpf_disabled=1 or $ sudo sysctl kernel.unprivileged_bpf_disabled=2
First published (updated )
CVE-2022-0001

Microsoft Windows Server 2012 R2Windows Kerberos Denial of Service Vulnerability

Risk 38
Severity
6.5
Null Pointer Dereference
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Kerberos Denial of Service Vulnerability

First published (updated )
CVE-2024-26183

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203