Windows Kernel vulnerabilities
89 known CVE vulnerabilities in Windows Kernel, translated and rated.
- CVE-2026-54132Medium
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges via a physical attack.
- CVE-2026-50354High
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50316Medium
A vulnerability in Windows Kernel allows an authorized attacker to disclose sensitive information locally by inserting it into a log file. The issue stems from improper data management in logs.
- CVE-2026-50300Medium
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-50294Medium
Windows Kernel exposes sensitive system information to unauthorized actors, allowing an unauthorized attacker to disclose information locally.
- CVE-2026-49808High
A race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-49795High
Use-After-Free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-49173High
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-49167Medium
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-48583High
The Windows Kernel contains a Use After Free vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-45653High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-42984High
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-33841High
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-20838Medium
Generation of error messages containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2024-30099High
A vulnerability in the Windows kernel allows elevation of privilege. A local attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2024-30068High
A vulnerability in the Windows kernel allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
- CVE-2024-21362Medium
A vulnerability in the Windows kernel allows security feature bypass. Technical details are not provided in the description.
- CVE-2024-21341Medium
Remote code execution vulnerability in the Windows kernel. Allows an attacker to execute code with elevated privileges.
- CVE-2024-21340Medium
Information disclosure vulnerability in the Windows kernel. It may allow an attacker to access data that should be protected.
- CVE-2023-38154High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35380High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35364High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized system access.
- CVE-2023-35363High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized system access.
- CVE-2023-35361High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35360High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35358High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35357High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35356High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35305High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2023-35304High
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
- CVE-2021-42285High
Elevation of privilege vulnerability in the Windows kernel. An attacker could exploit this flaw to gain administrator privileges.
- CVE-2021-38626High
Vulnerability in Windows Kernel allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-38625High
Vulnerability in Windows Kernel allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-34514High
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain elevated privileges.
- CVE-2021-34508High
Remote code execution vulnerability in the Windows kernel. An attacker could exploit it to gain elevated privileges and execute code in kernel mode.
- CVE-2021-34500Medium
Information disclosure vulnerability in the Windows kernel. An attacker could read kernel memory, potentially exposing sensitive data.
- CVE-2020-1114High
An elevation of privilege vulnerability in the Windows kernel due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, install programs, view, change or delete data, or create new accounts with full user rights.
- CVE-2020-1087High
Elevation of privilege vulnerability in the Windows Kernel due to improper handling of objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions.
- CVE-2020-1072Medium
Information disclosure vulnerability in the Windows kernel due to improper handling of objects in memory. An attacker must be logged on and run a specially crafted application. The vulnerability does not allow code execution or privilege escalation, but could be used to obtain information.

