Microsoft: >> Windows 10 1909 Security Vulnerabilities
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.
Required Configuration:
Only environments with Windows as the underlying operating system is affected by this issue
CVSS Score
7.3
EPSS Score
0.0
Published
2024-08-07
Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
6.7
EPSS Score
0.001
Published
2023-05-10
Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
6.7
EPSS Score
0.001
Published
2023-05-10
.NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.014
Published
2023-02-14
.NET Framework Denial of Service Vulnerability
CVSS Score
5.0
EPSS Score
0.003
Published
2023-02-14
HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-02-12
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability
Known exploited
CVSS Score
8.8
EPSS Score
0.916
Published
2022-05-10
CVE-2022-26925
Windows LSA Spoofing Vulnerability
Known exploited
CVSS Score
8.1
EPSS Score
0.353
Published
2022-05-10
Windows Graphics Component Information Disclosure Vulnerability
CVSS Score
6.5
EPSS Score
0.074
Published
2022-05-10
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.0
EPSS Score
0.167
Published
2022-04-15
Page 1