High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-13	CVE-2022-37969	Out-of-bounds Write vulnerability in Microsoft products Windows Common Log File System Driver Elevation of Privilege Vulnerability local low complexity microsoft CWE-787	7.8
2022-08-09	CVE-2022-34713	Unspecified vulnerability in Microsoft products Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability local low complexity microsoft	7.8
2022-01-11	CVE-2022-21871	Unspecified vulnerability in Microsoft products Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2022-01-11	CVE-2022-21882	Out-of-bounds Write vulnerability in Microsoft products Win32k Elevation of Privilege Vulnerability local low complexity microsoft CWE-787	7.8
2020-03-12	CVE-2020-0787	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-10-10	CVE-2019-1322	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8
2019-09-11	CVE-2019-1253	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft	7.8
2019-06-12	CVE-2019-1069	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations, aka 'Task Scheduler Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2019-04-09	CVE-2019-0841	Link Following vulnerability in Microsoft products An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. local low complexity microsoft CWE-59	7.8
2018-10-10	CVE-2018-8453	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. local low complexity microsoft	7.8