Microsoft: >> Windows Server 2016 >> 10.0.14393.8148 Security Vulnerabilities
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
Known exploited
CVSS Score
4.6
EPSS Score
0.01
Published
2025-06-05
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.007
Published
2024-10-08
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.012
Published
2024-10-08
Windows Remote Desktop Licensing Service Spoofing Vulnerability
CVSS Score
8.8
EPSS Score
0.051
Published
2024-09-10
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVSS Score
7.3
EPSS Score
0.008
Published
2024-07-09
Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.285
Published
2021-02-25
Windows LUAFV Elevation of Privilege Vulnerability
CVSS Score
7.3
EPSS Score
0.017
Published
2021-01-12
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.022
Published
2021-01-12
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.
CVSS Score
8.8
EPSS Score
0.154
Published
2020-08-17
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.
CVSS Score
7.8
EPSS Score
0.113
Published
2020-08-17