High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-04-11	CVE-2023-24927	Unspecified vulnerability in Microsoft products Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability network low complexity microsoft	8.8
2023-04-11	CVE-2023-24928	Unspecified vulnerability in Microsoft products Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability network low complexity microsoft	8.8
2023-04-11	CVE-2023-24885	Unspecified vulnerability in Microsoft products Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability network low complexity microsoft	8.8
2023-03-14	CVE-2023-23413	Unspecified vulnerability in Microsoft products Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability network low complexity microsoft	8.8
2023-02-28	CVE-2023-1017	Out-of-bounds Write vulnerability in multiple products An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. local low complexity trustedcomputinggroup microsoft CWE-787	7.8
2023-02-12	CVE-2022-38396	Unspecified vulnerability in Microsoft products HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. local low complexity microsoft	7.8
2022-01-11	CVE-2022-21871	Unspecified vulnerability in Microsoft products Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2020-03-12	CVE-2020-0787	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-06-12	CVE-2019-1069	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations, aka 'Task Scheduler Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2018-10-10	CVE-2018-8493	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. network low complexity microsoft	7.5