Patchfirst
Patchfirst
Class familyMicrosoft · Windows

Microsoft Windows privilege management flaws, 2002–2026

44 Windows CVEs with CWE-269 weaknesses, 25 Jun 2002 to 8 Sep 2026. 10 are in .

CVEs by year

Published each year. Select a CVE to open it.

Grouped by product and weakness type (CWE); not proven to share a root cause.

In CISA KEVNot in KEV

20021 CVE, 1 in KEV

20193 CVEs, 3 in KEV

20202 CVEs, 1 in KEV

20214 CVEs, 2 in KEV

202213 CVEs

20232 CVEs

20246 CVEs, 2 in KEV

20255 CVEs

20268 CVEs, 1 in KEV

CVEs in this family

Table view of the years above
CVEPublishedTitleLinked fromPriority
CVE-2002-0367KEV 25 Jun 2002 Microsoft Windows Privilege Escalation Vulnerability Grouped by weakness 66.9
CVE-2019-1215KEV 11 Sep 2019 Microsoft Windows Privilege Escalation Vulnerability Grouped by weakness 77.9
CVE-2019-1388KEV 12 Nov 2019 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Grouped by weakness 77.5
CVE-2019-1405KEV 12 Nov 2019 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability Grouped by weakness 78.1
CVE-2020-0787KEV 12 Mar 2020 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Grouped by weakness 82.1
CVE-2020-17103 9 Dec 2020 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Grouped by weakness 70.8
CVE-2021-34527KEV 2 Jul 2021 Microsoft Windows Print Spooler Remote Code Execution Vulnerability Grouped by weakness 88.1
CVE-2021-34484KEV 12 Aug 2021 Microsoft Windows User Profile Service Privilege Escalation Vulnerability Grouped by weakness 63.0
CVE-2021-34487 12 Aug 2021 Windows Event Tracing Elevation of Privilege Vulnerability Grouped by weakness 14.7
CVE-2021-38638 15 Sep 2021 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Grouped by weakness 14.3
CVE-2022-26795 15 Apr 2022 Windows Print Spooler Elevation of Privilege Vulnerability Grouped by weakness 15.1
CVE-2022-34691 9 Aug 2022 Active Directory Domain Services Elevation of Privilege Vulnerability Grouped by weakness 22.9
CVE-2022-34699 9 Aug 2022 Windows Win32k Elevation of Privilege Vulnerability Grouped by weakness 23.7
CVE-2022-34703 9 Aug 2022 Windows Partition Management Driver Elevation of Privilege Vulnerability Grouped by weakness 15.5
CVE-2022-34706 9 Aug 2022 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Grouped by weakness 13.3
CVE-2022-35761 9 Aug 2022 Windows Kernel Elevation of Privilege Vulnerability Grouped by weakness 23.6
CVE-2022-35762 9 Aug 2022 Storage Spaces Direct Elevation of Privilege Vulnerability Grouped by weakness 13.8
CVE-2022-35763 9 Aug 2022 Storage Spaces Direct Elevation of Privilege Vulnerability Grouped by weakness 13.6
CVE-2022-35764 9 Aug 2022 Storage Spaces Direct Elevation of Privilege Vulnerability Grouped by weakness 13.6
CVE-2022-35765 9 Aug 2022 Storage Spaces Direct Elevation of Privilege Vulnerability Grouped by weakness 13.6
CVE-2022-35768 9 Aug 2022 Windows Kernel Elevation of Privilege Vulnerability Grouped by weakness 18.5
CVE-2022-35771 9 Aug 2022 Windows Defender Credential Guard Elevation of Privilege Vulnerability Grouped by weakness 16.9
CVE-2022-44689 13 Dec 2022 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability Grouped by weakness 14.0
CVE-2023-23412 14 Mar 2023 Windows Accounts Picture Elevation of Privilege Vulnerability Grouped by weakness 11.0
CVE-2023-36721 10 Oct 2023 Windows Error Reporting Service Elevation of Privilege Vulnerability Grouped by weakness 12.0
CVE-2024-26169KEV 12 Mar 2024 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Grouped by weakness 71.6
CVE-2024-28904 9 Apr 2024 Microsoft Brokering File System Elevation of Privilege Vulnerability Grouped by weakness 13.9
CVE-2024-28905 9 Apr 2024 Microsoft Brokering File System Elevation of Privilege Vulnerability Grouped by weakness 13.6
CVE-2024-29052 9 Apr 2024 Windows Storage Elevation of Privilege Vulnerability Grouped by weakness 15.0
CVE-2024-30007 14 May 2024 Microsoft Brokering File System Elevation of Privilege Vulnerability Grouped by weakness 15.5
CVE-2024-38014KEV 10 Sep 2024 Microsoft Windows Installer Improper Privilege Management Vulnerability Grouped by weakness 62.2
CVE-2025-21287 14 Jan 2025 Windows Installer Elevation of Privilege Vulnerability Grouped by weakness 14.7
CVE-2025-27468 13 May 2025 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Grouped by weakness 8.3
CVE-2025-33067 10 Jun 2025 Windows Task Scheduler Elevation of Privilege Vulnerability Grouped by weakness 13.7
CVE-2025-47955 10 Jun 2025 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Grouped by weakness 17.2
CVE-2025-59514 11 Nov 2025 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability Grouped by weakness 12.0
CVE-2026-21533KEV 10 Feb 2026 Microsoft Windows Improper Privilege Management Vulnerability Grouped by weakness 71.6
CVE-2026-32181 14 Apr 2026 Connected User Experiences and Telemetry Service Denial of Service Vulnerability Grouped by weakness 11.0
CVE-2026-32212 14 Apr 2026 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Grouped by weakness 8.6
CVE-2026-49176 14 Jul 2026 Windows WalletService Elevation of Privilege Vulnerability Grouped by weakness 15.6
CVE-2026-50295 14 Jul 2026 Windows Zero Trust DNS Security Feature Bypass Vulnerability Grouped by weakness 8.4
CVE-2026-50343 14 Jul 2026 Microsoft Install Service Elevation of Privilege Vulnerability Grouped by weakness 15.0
CVE-2026-50391 14 Jul 2026 Windows Group Policy Elevation of Privilege Vulnerability Grouped by weakness 10.0
CVE-2026-68830 8 Sep 2026 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Grouped by weakness 10.1
↑ ↓ chooseEnter openEsc close