Patches

No CVE Microsoft Windows DFSCoerce  

Distributed File System "DFSCoerce" Privilege Escalation

No CVE Microsoft Windows PrinterBug/SpoolSample  

Print Spooler "PrinterBug/SpoolSample" Privilege Escalation

No CVE Microsoft Windows DogWalk  

Microsoft Diagnostic Tools "DogWalk" Package File Traversal

DogWalk

CVE-2022-30190 Microsoft Windows Follina    

ms-msdt URL Protocol "Follina" PowerShell RCE

Follina

CVE-2022-26809, CVE-2022-22019 Microsoft Windows    

Remote Procedure Call Runtime Integer Overflow

CVE-2022-21990 Microsoft Windows    

Remote Desktop Client Remote Code Execution

CVE-2022-21974 Microsoft Windows    

Windows Runtime Remote Code Execution Vulnerability

CVE-2022-21971 Microsoft Windows    

Windows Runtime Remote Code Execution Vulnerability

CVE-2022-21999 Microsoft Windows SpoolFool    

Windows Print Spooler Elevation of Privilege

SpoolFool

CVE-2021-42278 Microsoft Windows    

Active Directory Domain Services Elevation of Privilege

No CVE Microsoft Windows Remote Potato0  

Remote Potato0 Privilege Escalation

No CVE Microsoft Windows    

ms-officecmd Remote Code Execution

CVE-2021-43883 Microsoft Windows    

Windows InstallerFileTakeOver Local Privilege Escalation

CVE-2021-24084 Microsoft Windows    

Mobile Device Management Local Privilege Escalation

CVE-2021-40469 Microsoft Windows Server    

DNS Server RCE by DNSAdmins

CVE-2021-34484 Microsoft Windows  

Windows User Profile Service Elevation of Privilege

CVE-2021-34480 Microsoft Windows    

Scripting Engine Memory Corruption

CVE-2021-40444 Microsoft Windows    

MSHTML Remote Code Execution

CVE-2021-33742 Microsoft Windows    

MSHTML Remote Code Execution

CVE-2021-36942 Microsoft Windows PetitPotam    

PetitPotam NTLM Relay Attack

PetitPotam

CVE-2021-36958 Microsoft Windows    

Malicious printer driver local privilege escalation

CVE-2020-0787 Microsoft Windows    

Background Intelligent Transfer Service Elevation of Privilege

CVE-2021-34527 Microsoft Windows PrintNightmare    

Print Spooler Remote Code Execution

PrintNightmare

CVE-2021-31959 Internet Explorer    

Scripting Engine Memory Corruption

CVE-2021-26419 Internet Explorer    

Scripting Engine Memory Corruption

CVE-2021-26415 Microsoft Windows    

Windows Installer Elevation of Privilege

CVE-2021-26897 Microsoft Windows Server    

Windows DNS Server SIG Record Buffer Overflow

CVE-2021-26877 Microsoft Windows Server    

Windows DNS Server TXT Record Out-Of-Bounds Read

CVE-2021-26411 Internet Explorer    

HTML Attribute nodeValue Double Free

CVE-2020-1030 Microsoft Windows    

Print Spooler Elevation of Privilege

CVE-2021-1727 Microsoft Windows    

Windows Installer config.msi Local Privilege Escalation

CVE-2021-1733 Microsoft PsExec    

PsExec Local Privilege Escalation

CVE-2020-1013 Microsoft Windows    

WSUS Spoofing

CVE-2020-17001 Microsoft Windows    

Print Spooler Elevation of Privilege

CVE-2021-27091 Microsoft Windows    

Windows RpcEptMapper and Dnscache Service Insecure Registry Permissions EoP

CVE-2020-1300 Microsoft Windows    

Cabinet File Directory Traversal RCE

CVE-2021-1640 Microsoft Windows    

Print Spooler Arbitrary File Creation

CVE-2020-1062 Microsoft Windows    

JScript Garbage Collection RCE

CVE-2020-0968 Microsoft Windows    

Scripting Engine Memory Corruption

CVE-2020-1472 Microsoft Windows Zerologon    

Netlogon Elevation of Privilege

Zerologon

CVE-2020-1380 Microsoft Windows    

Scripting Engine Memory Corruption

CVE-2020-1530 Microsoft Windows    

Remote Access Phonebook Use-After-Free

CVE-2020-1337 Microsoft Windows    

Elevation of Privilege in Print Spooler

CVE-2020-1113 Microsoft Windows    

Task Scheduler Security Feature Bypass

CVE-2020-1350 Microsoft Windows SIGRed    

DNS Server Remote Code Execution

SIGRed

CVE-2020-0662 Microsoft Windows    

Memory Corruption in DHCP Message Processing

Unknown CVE Zoom Client for Windows    

Remote Code Execution

CVE-2020-1299 Microsoft Windows    

LNK Remote Code Execution

CVE-2020-1281 Microsoft Windows    

OLE Remote Code Execution

CVE-2017-8570 Microsoft Office    

Microsoft Office Remote Code Execution Vulnerability

CVE-2020-1015 Microsoft Windows    

User-Mode Power Service Memory Corruption

CVE-2020-1048 Microsoft Windows PrintDemon    

Print Spooler Elevation of Privilege

PrintDemon

CVE-2020-0687 Microsoft Windows    

Microsoft Graphics Remote Code Execution

CVE-2020-0729 Microsoft Windows    

Microsoft LNK Remote Code Execution

CVE-2020-0938, CVE-2020-1020 Microsoft Windows  

Microsoft Type 1 Font Parsing Remote Code Execution

workaround

CVE-2020-0668 Microsoft Windows    

Windows Service Tracing Elevation of Privilege

CVE-2020-0881 Microsoft Windows    

Microsoft GDI+ Remote Code Execution

CVE-2020-0683 Microsoft Windows    

Microsoft Windows Installer Elevation of Privilege

CVE-2012-0158 Microsoft Office    

MSCOMCTL ActiveX Buffer Overflow

CVE-2017-11774 Microsoft Outlook    

Arbitrary Code Execution Via Home Page

a fix for an old but still exploited vulnerability used by Iranian-sponsored groups

CVE-2020-0674 Internet Explorer  

Scripting Engine Memory Corruption

workaround

Unkonwn CVE Dropbox  

Updater Arbitrary File Overwrite

CVE-2019-1429 Internet Explorer    

Microsoft Scripting Engine Memory Corruption

CVE-2019-5047 NitroPDF    

CharProcs Remote Code Execution

CVE-2019-5048 NitroPDF    

ICCBased Color Space Remote Code Execution

CVE-2019-5053 NitroPDF    

Stream Length Memory Corruption

CVE-2019-5050 NitroPDF    

Page Kids Remote Code Execution

CVE-2019-1069 Microsoft Windows BearLPE    

Local Privilege Escalation in Task Scheduler

BearLPE

CVE-2019-0708 Microsoft Windows BlueKeep    

Remote Code Execution in Remote Desktop Services

BlueKeep

CVE-2017-0176 Microsoft Windows XP/Server 2003 EsteemAudit    

Microsoft Windows XP SP3/Server 2003 SP2 RDP privilege escalation

EsteemAudit

Unknown CVE Oracle Java    

Oracle Java RE out-of-bounds read during TTF font rendering in ExtractBitMap_blocClass

CVE-2019-1054 Microsoft Internet Explorer  

Missing Error Check on Reading Mark-Of-The-Web

Microsoft Edge uses a secret trick and breaks Internet Explorer's security

Unknown CVE Oracle Java    

Oracle Java RE out-of-bounds read in AlternateSubstitutionSubtable::process

Unknown CVE Oracle Java    

Oracle Java RE out-of-bounds read in OpenTypeLayoutEngine::adjustGlyphPositions

CVE-2018-20250 RARLAB WinRAR  

WinRAR ACE Path Traversal

CVE-2018-16858 OpenOffice    

OpenOffice Python Script Handler Directory Traversal

CVE-2018-16858 LibreOffice  

LibreOffice Python Script Handler Directory Traversal

CVE-2019-7089 Adobe Acrobat Reader DC  

Adobe Reader Callback Via UNC Path

No CVE Microsoft Windows  

Microsoft Windows Contacts Arbitrary Code Execution

CVE-2019-0636 Microsoft Windows readfile  

MsiAdvertiseProduct Unauthorized File Read

readfile

CVE-2019-0863 Microsoft Windows AngryPolarBearBug    

Error Reporting Local Privilege Escalation

AngryPolarBearBug

CVE-2018-0952 Microsoft Windows  

Microsoft Diagnostic Hub Standard Collector Elevation Of Privilege

CVE-2018-8584 Microsoft Windows deletebug  

Microsoft Data Sharing Service Arbitrary File Delete

deletebug

CVE-2018-8423 Microsoft Windows  

Out-Of-Bounds Write in Microsoft Jet Database Engine

Outrunning Attackers On The Jet Database Engine 0day

CVE-2017-16720 Advantech WebAccess  

Advantech WebAccess webvrpcs "Draw" Remote Code Execution

No CVE Advantech WebAccess  

Advantech WebAccess webvrpcs "View" Remote Code Execution

CVE-2018-8353 Microsoft Windows  

Microsoft Scripting Engine Memory Corruption

CVE-2018-8440 Microsoft Windows  

Microsoft Windows Task Scheduler ALPC Local Privilege Escalation

Publicly Dropped 0day in Task Scheduler

CVE-2018-8414 Microsoft Windows  

Microsoft Windows "SettingContent-ms" Remote Code Execution

Initially rejected for patching by Microsoft

CVE-2018-12815 Adobe Acrobat Reader DC  

Adobe Acrobat Reader DC JSON Stringify Remote Code Execution

CVE-2018-8242 Microsoft Windows  

Microsoft Scripting Engine Memory Corruption

CVE-2018-12756 Adobe Acrobat Reader DC  

Adobe Acrobat Reader Use-After-Free memory corruption

CVE-2017-17557 Foxit Reader  

Foxit Reader Arbitrary Code Execution

CVE-2018-8174 Microsoft Windows  

Microsoft Windows VBScript Engine Remote Code Execution

A micropatch instead of the official update that probably broke your network

CVE-2017-7269 Microsoft Windows Immortal  

Buffer overflow in WebDAV service ScStoragePathFromUrl

Heavily exploited in the wild for 9 months

CVE-2018-0802 Microsoft Windows Office  

Microsoft Office Equation Editor Memory Corruption

The Bug That Killed Equation Editor

CVE-2018-5996 7-Zip  

7-Zip Memory Corruptions via RAR PPMd

CVE-2018-0798 Microsoft Windows Office  

Microsoft Equation Editor Memory Corruption

Bringing back abandoned MS Equation Editor

CVE-2017-17969 7-Zip  

7-Zip Heap Buffer Overflow

CVE-2017-11882 Microsoft Windows  

MS Office Equation Editor Memory Corruption

CVE-2017-11826 Microsoft Windows  

Microsoft Word OOXML Parser Memory Corruption

No CVE Microsoft Windows  

Microsoft Office DDE/DDEAUTO Remote Code Execution

It's a feature, not a bug

CVE-2017-4924 VMware Workstation  

VMware Workstation Shader Out-Of-Bounds Write

Micropatching a hypervisor with running virtual machines

CVE-2017-11281 Adobe Flash Player  

Adobe Flash Player Remote Memory Corruption

CVE-2017-11282 Adobe Flash Player  

Adobe Flash Player Remote Memory Corruption

CVE-2017-0022 Microsoft Windows  

Microsoft XML Core Services Information Disclosure

Exploit kit rendezvous

CVE-2017-8464 Microsoft Windows  

Microsoft LNK Remote Code Execution

The New Stuxnet Windows LNK Vulnerability

CVE-2017-2779 National Instruments LabVIEW  

LabVIEW RSRC Arbitrary Null Write Code Execution

CVE-2017-10952 Foxit Reader  

Foxit Reader saveAs Arbitrary File Write

A logical bug patched

CVE-2017-0283 Microsoft Windows  

Microsoft Windows Uniscribe Remote Code Execution

CVE-2013-2472 Oracle Java  

Oracle Java ShortComponentRaster.verify() Memory Corruption

CVE-2017-0290 Microsoft Windows  

Microsoft Malware Protection Engine Type Confusion

Worst windows remote code execution

CVE-2013-2473 Oracle Java  

Oracle Java Blit function heap buffer overflow

CVE-2013-2471 Oracle Java  

Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow

CVE-2013-2470 Oracle Java  

Oracle Java lookupByteBI function heap buffer overflow

CVE-2017-0037 Microsoft Windows  

Internet Explorer 11 Type confusion in HandleColumnBreakOnColumnSpanningElement

CVE-2017-0038 Microsoft Windows  

Microsoft Windows gdi32.dll EMF file information disclosure

No CVE 0patch Agent  

Module loading logical error in 0patch Loader (functional flaw)

Patch to self, functional flaw

CVE-2016-3740 Foxit Reader  

Foxit Reader ConvertToPDF TIFF SamplesPerPixel Parsing Heap Buffer Overflow

CVE-2016-1077 Adobe Acrobat Reader DC  

Adobe Acrobat Reader Deflate Use-After-Free

CVE-2015-6130 Microsoft Windows  

Integer Underflow in Unicode Script Processor

CVE-2014-6321 Microsoft Windows  

Windows schannel remote code execution (MS14-066)

First micropatch released on Twitter

CVE-2013-7409 AllPlayer  

AllPlayer 5.8 Buffer Overflow In .M3u File

CVE-2013-6877 RealPlayer  

RealPlayer 16.0.2.32 Buffer Overflow In .rmp File

CVE-2011-1260 Microsoft Windows  

Internet Explorer 8 MS11-050 MSHTML use-after-free

CVE-2011-2371 Mozilla Firefox  

Firefox 3.6.16 ReduceRight() Integer Overflow

No CVE Foxit Reader  

Foxit Reader 4.1.1 Stack Buffer Overflow

CVE-2008-2992 Adobe Acrobat Reader  

Adobe util.printf() Buffer Overflow

CVE-2009-0927 Adobe Acrobat Reader  

Adobe Collab.getIcon() Buffer Overflow

CVE-2013-2463 Oracle Java  

Oracle Java BytePackedRaster.verify() Signed Integer Overflow

CVE-2013-2465 Oracle Java  

Oracle Java storeImageArray function heap buffer overflow

CVE-2014-0160 OpenSSL  

OpenSSL Heartbeat (Heartbleed) Information Leak

Our first public micropatch