Microsoft Windows Server, version 2004 (Server Core installation)

177 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2020-1468unspecifiedAn information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows MEDIUM 6.55.2 %
CVE-2020-1463An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStreamHIGH 7.80.8 %
CVE-2020-1438unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.80.8 %
CVE-2020-1437unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, akaHIGH 7.80.7 %
CVE-2020-1436unspecifiedA remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems exceptHIGH 8.821 %
CVE-2020-1435unspecifiedA remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka HIGH 8.814 %
CVE-2020-1434unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync HoMEDIUM 5.30.8 %
CVE-2020-1431unspecifiedAn elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resultiHIGH 7.80.8 %
CVE-2020-1430unspecifiedAn elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, anHIGH 7.80.8 %
CVE-2020-1429unspecifiedAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error RHIGH 7.80.9 %
CVE-2020-1428unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.80.7 %
CVE-2020-1427unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.80.8 %
CVE-2020-1426unspecifiedAn information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMEDIUM 5.51.3 %
CVE-2020-1424unspecifiedAn elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateHIGH 7.81.4 %
CVE-2020-1423unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for LinHIGH 7.80.8 %
CVE-2020-1422unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1421unspecifiedA remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaHIGH 8.875 %
CVE-2020-1420unspecifiedAn information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerabilityMEDIUM 5.51.3 %
CVE-2020-1419unspecifiedAn information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel InMEDIUM 5.51.4 %
CVE-2020-1418unspecifiedAn elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to aHIGH 7.81.0 %
CVE-2020-1415unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1414unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1413unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1412unspecifiedA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphicsHIGH 8.814 %
CVE-2020-1411unspecifiedAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.9 %
CVE-2020-1410unspecifiedA remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, HIGH 7.812 %
CVE-2020-1409A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution VHIGH 7.812 %
CVE-2020-1408unspecifiedA remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'MicrosoHIGH 8.85.6 %
CVE-2020-1407unspecifiedA remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnHIGH 7.811 %
CVE-2020-1406unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows NetwHIGH 7.80.9 %
CVE-2020-1405unspecifiedAn elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiHIGH 7.10.8 %
CVE-2020-1404unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1402unspecifiedAn elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerabHIGH 7.80.9 %
CVE-2020-1401unspecifiedA remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnHIGH 7.813 %
CVE-2020-1400unspecifiedA remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnHIGH 7.824 %
CVE-2020-1399unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.7 %
CVE-2020-1398unspecifiedAn elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who succesMEDIUM 6.81.2 %
CVE-2020-1397unspecifiedAn information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, akaMEDIUM 6.56.4 %
CVE-2020-1396unspecifiedAn elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker whoHIGH 7.80.8 %
CVE-2020-1395unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows ElevaHIGH 7.80.7 %
CVE-2020-1394unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows EleHIGH 7.80.8 %
CVE-2020-1393An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input,HIGH 7.80.9 %
CVE-2020-1392unspecifiedAn elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'WinHIGH 7.80.9 %
CVE-2020-1391unspecifiedAn information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memoryMEDIUM 5.51.3 %
CVE-2020-1390unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.80.8 %
CVE-2020-1389unspecifiedAn information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel InMEDIUM 5.51.3 %
CVE-2020-1388unspecifiedAn elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of PrivilegeHIGH 7.80.8 %
CVE-2020-1387unspecifiedAn elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushHIGH 7.80.8 %
CVE-2020-1386unspecifiedAn information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, akaMEDIUM 5.51.3 %
CVE-2020-1385unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows CredentHIGH 7.80.7 %
CVE-2020-1384unspecifiedAn elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles HIGH 7.80.8 %
CVE-2020-1382unspecifiedAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiHIGH 7.85.3 %
CVE-2020-1381unspecifiedAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiHIGH 7.81.0 %
CVE-2020-1375unspecifiedAn elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of PriHIGH 7.86.9 %
CVE-2020-1374unspecifiedA remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote DeHIGH 7.59.1 %
CVE-2020-1373unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.80.8 %
CVE-2020-1372unspecifiedAn elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory,HIGH 7.80.7 %
CVE-2020-1371unspecifiedAn elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilitHIGH 7.80.8 %
CVE-2020-1370unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1369An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiHIGH 7.81.0 %
CVE-2020-1368unspecifiedAn elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'WinHIGH 7.80.7 %
CVE-2020-1367unspecifiedAn information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMEDIUM 5.51.3 %
CVE-2020-1366unspecifiedAn elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows PrHIGH 7.80.7 %
CVE-2020-1365unspecifiedAn elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilitHIGH 7.80.8 %
CVE-2020-1364unspecifiedA denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service VulneHIGH 7.10.7 %
CVE-2020-1363unspecifiedAn elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an HIGH 7.80.8 %
CVE-2020-1362unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiHIGH 7.82.5 %
CVE-2020-1361unspecifiedAn information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker woMEDIUM 5.51.3 %
CVE-2020-1360An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile SerHIGH 7.80.7 %
CVE-2020-1359unspecifiedAn elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles HIGH 7.80.8 %
CVE-2020-1358unspecifiedAn information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerabMEDIUM 5.51.3 %
CVE-2020-1357unspecifiedAn elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows SystemHIGH 7.80.8 %
CVE-2020-1356unspecifiedAn elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI HIGH 7.80.7 %
CVE-2020-1355unspecifiedA remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploiHIGH 7.84.1 %
CVE-2020-1354unspecifiedAn elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, anHIGH 7.80.8 %
CVE-2020-1353unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.7 %
CVE-2020-1352unspecifiedAn elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an HIGH 7.80.8 %
CVE-2020-1351unspecifiedAn information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft GrapMEDIUM 5.51.4 %
CVE-2020-1350unspecifiedA remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows CRITICAL 10.097 %KEV
CVE-2020-1347unspecifiedAn elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage SerHIGH 7.80.8 %
CVE-2020-1346unspecifiedAn elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules IHIGH 7.80.8 %
CVE-2020-1344unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiHIGH 7.81.0 %
CVE-2020-1333unspecifiedAn elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group PolMEDIUM 6.71.0 %
CVE-2020-1330unspecifiedAn information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiMEDIUM 5.51.3 %
CVE-2020-1267unspecifiedThis security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attMEDIUM 4.94.5 %
CVE-2020-1249An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1085unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'WindowHIGH 7.80.7 %
CVE-2020-1348unspecifiedAn information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows MEDIUM 6.55.4 %
CVE-2020-1334unspecifiedAn elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.7 %
CVE-2020-1324unspecifiedAn elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To HIGH 7.80.8 %
CVE-2020-1317unspecifiedAn elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege VulnerabHIGH 8.84.3 %
CVE-2020-1316unspecifiedAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.81.0 %
CVE-2020-1314unspecifiedAn elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messagesHIGH 7.83.1 %
CVE-2020-1313An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsHIGH 7.839 %
CVE-2020-1312An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioHIGH 7.80.8 %
CVE-2020-1311An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model HIGH 7.83.2 %
CVE-2020-1309unspecifiedAn elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an HIGH 7.83.8 %
CVE-2020-1307An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.83.9 %
CVE-2020-1306An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.80.8 %
CVE-2020-1305An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows HIGH 7.83.2 %
CVE-2020-1304An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.83.4 %
CVE-2020-1302An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioHIGH 7.80.8 %
CVE-2020-1301A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests,HIGH 8.844 %
CVE-2020-1300unspecifiedA remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an HIGH 8.860 %
CVE-2020-1299A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaHIGH 8.815 %
CVE-2020-1296A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & MEDIUM 5.51.3 %
CVE-2020-1294unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiHIGH 7.83.4 %
CVE-2020-1293An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'HIGH 7.80.8 %
CVE-2020-1292An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aHIGH 7.83.2 %
CVE-2020-1291An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoHIGH 7.83.1 %
CVE-2020-1290An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMEDIUM 5.51.3 %
CVE-2020-1287unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiHIGH 7.83.1 %
CVE-2020-1286A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploHIGH 8.812 %
CVE-2020-1284unspecifiedA denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests,MEDIUM 6.57.0 %
CVE-2020-1283A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.MEDIUM 6.58.8 %
CVE-2020-1282An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.83.4 %
CVE-2020-1281A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code HIGH 8.815 %
CVE-2020-1280An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows BluetooHIGH 7.83.1 %
CVE-2020-1279An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka 'HIGH 7.80.8 %
CVE-2020-1278An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'HIGH 7.80.8 %
CVE-2020-1277An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioHIGH 7.80.8 %
CVE-2020-1276An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.9 %
CVE-2020-1275An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.8 %
CVE-2020-1274An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.8 %
CVE-2020-1273An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.8 %
CVE-2020-1272An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading HIGH 7.80.8 %
CVE-2020-1271An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabilHIGH 7.80.8 %
CVE-2020-1270An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service ElevatioHIGH 7.80.8 %
CVE-2020-1269unspecifiedAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.81.0 %
CVE-2020-1268An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service InformationMEDIUM 5.51.3 %
CVE-2020-1266An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.9 %
CVE-2020-1264An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.8 %
CVE-2020-1263An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error ReportMEDIUM 5.51.3 %
CVE-2020-1262An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.80.9 %
CVE-2020-1261An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error ReportMEDIUM 5.51.3 %
CVE-2020-1259unspecifiedA security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'WindowMEDIUM 4.33.1 %
CVE-2020-1258An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMEDIUM 6.71.0 %
CVE-2020-1257An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'HIGH 7.80.8 %
CVE-2020-1255unspecifiedAn elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handlesHIGH 8.83.4 %
CVE-2020-1254An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authHIGH 7.80.9 %
CVE-2020-1253An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMEDIUM 6.71.0 %
CVE-2020-1251An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMEDIUM 6.70.9 %
CVE-2020-1248A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka HIGH 8.814 %
CVE-2020-1247An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akHIGH 7.80.9 %
CVE-2020-1246An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.81.0 %
CVE-2020-1244A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnHIGH 7.13.1 %
CVE-2020-1241A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilitHIGH 7.83.3 %
CVE-2020-1239A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoHIGH 8.86.1 %
CVE-2020-1238A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoHIGH 8.87.2 %
CVE-2020-1237An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oHIGH 7.83.2 %
CVE-2020-1236unspecifiedA remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnHIGH 7.812 %
CVE-2020-1235An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.83.1 %
CVE-2020-1234An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabiliHIGH 7.84.8 %
CVE-2020-1233An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.83.4 %
CVE-2020-1232unspecifiedAn information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMEDIUM 6.56.0 %
CVE-2020-1231An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationHIGH 7.83.5 %
CVE-2020-1222An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an HIGH 7.80.8 %
CVE-2020-1217An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime InformatiHIGH 7.84.5 %
CVE-2020-1212An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an HIGH 7.83.5 %
CVE-2020-1211An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecHIGH 7.83.1 %
CVE-2020-1209unspecifiedAn elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows NetwHIGH 7.83.4 %
CVE-2020-1208A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnHIGH 7.815 %
CVE-2020-1207An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akHIGH 7.81.2 %
CVE-2020-1206An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reqHIGH 7.510 %
CVE-2020-1204unspecifiedAn elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiHIGH 7.10.8 %
CVE-2020-1203An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to pHIGH 7.80.9 %
CVE-2020-1202An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to pHIGH 7.80.9 %
CVE-2020-1201An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows NoHIGH 7.80.9 %
CVE-2020-1197An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error RHIGH 7.80.9 %
CVE-2020-1196unspecifiedAn elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print ConfiguratiHIGH 7.80.8 %
CVE-2020-1194unspecifiedA denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of SerMEDIUM 5.51.3 %
CVE-2020-1162An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To HIGH 7.80.8 %
CVE-2020-1160An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrMEDIUM 5.51.6 %
CVE-2020-1120unspecifiedA denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnMEDIUM 5.51.3 %
CVE-2020-0986An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaHIGH 7.816 %KEV
CVE-2020-0916An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WHIGH 7.80.9 %
CVE-2020-0915An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WHIGH 7.80.9 %