Microsoft Windows on X64

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*

part: o version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows (790d2205-4aaf-5ec7-ba16-f6218a5ca782)
Edition*
Language*
Software edition*
Target software*
Target hardwarex64
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5180 not_vulnerable 2026-06-08 07:35:24.332914 Wondershare Filmora Installer NFWCHK.exe uncontrolled search path
HIGH (7)
A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-26T10:00:07.551Z
Updated: 2025-05-28T17:35:50.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11001 not_vulnerable 2026-06-08 07:02:27.906365 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
HIGH (7)
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
Published: 2025-11-19T21:16:49.635Z
Updated: 2026-02-26T16:07:46.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4018 not_vulnerable 2026-06-08 06:50:16.851241 Privilege Escalation in U-Series Appliance
HIGH (8.8)
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (local appliance api modules) allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3.
Published: 2024-04-19T20:29:19.626Z
Updated: 2024-08-01T20:26:57.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4017 not_vulnerable 2026-06-08 06:50:16.849506 Privilege Escalation in U-Series Appliance
HIGH (8.8)
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit (filesystem modules) allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3.
Published: 2024-04-19T20:40:25.256Z
Updated: 2024-08-01T20:26:57.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4136 not_vulnerable 2026-06-08 06:16:11.586680 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafter Engine
HIGH (7.4)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64 bit allows Reflected XSS.This issue affects CrafterCMS: from 4.0.0 through 4.0.2, from 3.1.0 through 3.1.27.
Published: 2023-08-03T13:33:10.409Z
Updated: 2025-02-13T17:09:02.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41552 not_vulnerable 2026-06-08 05:48:30.479805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3884 not_vulnerable 2026-06-08 05:48:22.541672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25256 not_vulnerable 2026-06-08 05:41:45.631024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29218 not_vulnerable 2026-06-08 05:31:26.004416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5674 not_vulnerable 2026-06-08 05:26:43.525794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36605 not_vulnerable 2026-06-08 05:25:49.216679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28963 not_vulnerable 2026-06-08 05:23:56.678117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11862 not_vulnerable 2026-06-08 05:17:55.068349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14678 not_vulnerable 2026-06-08 05:12:55.867394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7824 not_vulnerable 2026-06-08 05:12:04.394570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20733 not_vulnerable 2026-06-08 05:11:27.800913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20732 not_vulnerable 2026-06-08 05:11:27.798641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9281 not_vulnerable 2026-06-08 05:07:13.515745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.