Class familyMicrosoft · Windows
Microsoft Windows authentication bypass flaws, 2019–2024
4 Windows CVEs with CWE-287 weaknesses, 8 Jan 2019 to 12 Nov 2024. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2019’19
2020’20
2021’21
2022’22
1 2023’23
2 2024’24
In CISA KEVNot in KEV
20191 CVE, 1 in KEV
20231 CVE
20242 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-0543KEV | 8 Jan 2019 | Microsoft Windows Privilege Escalation Vulnerability | Grouped by weakness | 76.8 |
| CVE-2023-21817 | 14 Feb 2023 | Windows Kerberos Elevation of Privilege Vulnerability | Grouped by weakness | 21.7 |
| CVE-2024-38124 | 8 Oct 2024 | Windows Netlogon Elevation of Privilege Vulnerability | Grouped by weakness | 19.8 |
| CVE-2024-49039KEV | 12 Nov 2024 | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | Grouped by weakness | 78.5 |