Microsoft Windows Server
755 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1468 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows | MEDIUM 6.5 | 5.2 % | ||
| CVE-2020-1463 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1438 | | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1437 | | An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1436 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except | HIGH 8.8 | 21 % | ||
| CVE-2020-1435 | | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 14 % | ||
| CVE-2020-1434 | | An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Ho | MEDIUM 5.3 | 0.8 % | ||
| CVE-2020-1431 | | An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulti | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1430 | | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1429 | | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error R | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1428 | | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1427 | | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1426 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1424 | | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 1.4 % | ||
| CVE-2020-1422 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1421 | | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta | HIGH 8.8 | 75 % | ||
| CVE-2020-1420 | | An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1419 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel In | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1418 | | An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to a | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1415 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1414 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1413 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1412 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics | HIGH 8.8 | 14 % | ||
| CVE-2020-1411 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1410 | | A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, | HIGH 7.8 | 12 % | ||
| CVE-2020-1409 | 2019 ; 2019 (Core installation) ; 2016 ; … | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V | HIGH 7.8 | 12 % | ||
| CVE-2020-1408 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microso | HIGH 8.8 | 5.6 % | ||
| CVE-2020-1407 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 11 % | ||
| CVE-2020-1406 | | An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Netw | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1405 | | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | HIGH 7.1 | 0.8 % | ||
| CVE-2020-1404 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1402 | | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1401 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 13 % | ||
| CVE-2020-1400 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 24 % | ||
| CVE-2020-1399 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1398 | | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who succes | MEDIUM 6.8 | 1.2 % | ||
| CVE-2020-1397 | | An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka | MEDIUM 6.5 | 6.4 % | ||
| CVE-2020-1396 | | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1395 | | An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Eleva | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1394 | | An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Ele | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1393 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1392 | | An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1390 | | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1389 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel In | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1388 | | An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1387 | | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1386 | | An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1385 | | An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credent | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1384 | | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1375 | | An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Pri | HIGH 7.8 | 6.9 % | ||
| CVE-2020-1374 | | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De | HIGH 7.5 | 9.1 % | ||
| CVE-2020-1373 | | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1372 | | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1371 | | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilit | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1370 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1369 | | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1368 | | An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Win | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1367 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1366 | | An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Pr | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1365 | | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilit | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1364 | | A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulne | HIGH 7.1 | 0.7 % | ||
| CVE-2020-1363 | | An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1362 | | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 2.5 % | ||
| CVE-2020-1361 | | An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker wo | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1360 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Ser | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1359 | | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1358 | | An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerab | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1357 | | An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1356 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1354 | | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1353 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1352 | | An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1351 | | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Grap | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1350 | 2019 ; 2019 (Core installation) ; 2016 ; … | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows | CRITICAL 10.0 | 97 % | KEV | |
| CVE-2020-1347 | | An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Ser | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1346 | | An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules I | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1344 | 2016 ; 2019 (Core installation) ; 2019 ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1333 | | An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Pol | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1330 | | An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1267 | 2019 ; 2019 (Core installation) ; 2016 ; … | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated att | MEDIUM 4.9 | 4.5 % | ||
| CVE-2020-1249 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1085 | 2019 ; 2019 (Core installation) ; 2016 ; … | An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Window | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1043 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 5.9 % | ||
| CVE-2020-1042 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 6.0 % | ||
| CVE-2020-1041 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 5.9 % | ||
| CVE-2020-1040 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 7.4 % | KEV | |
| CVE-2020-1036 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 6.2 % | ||
| CVE-2020-1032 | 2016 ; 2016 (Core installation) ; 2008 R2 for x64-based Systems Service Pack 1 ; … | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica | CRITICAL 9.0 | 5.9 % | ||
| CVE-2020-1348 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows | MEDIUM 6.5 | 5.4 % | ||
| CVE-2020-1334 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1324 | | An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1317 | | An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerab | HIGH 8.8 | 4.3 % | ||
| CVE-2020-1316 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1314 | | An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1312 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1311 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1310 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1309 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 3.8 % | ||
| CVE-2020-1306 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1305 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1304 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1302 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1301 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, | HIGH 8.8 | 44 % | ||
| CVE-2020-1300 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an | HIGH 8.8 | 60 % | ||
| CVE-2020-1299 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta | HIGH 8.8 | 15 % | ||
| CVE-2020-1296 | 2019 ; 2019 (Core installation) | A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1294 | | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1293 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1292 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, a | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1291 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1290 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1287 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1286 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully explo | HIGH 8.8 | 12 % | ||
| CVE-2020-1283 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. | MEDIUM 6.5 | 8.8 % | ||
| CVE-2020-1282 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1281 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code | HIGH 8.8 | 15 % | ||
| CVE-2020-1280 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetoo | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1279 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1277 | 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1276 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1274 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1272 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1271 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabil | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1270 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1269 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1266 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1264 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1263 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1262 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1261 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1259 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Window | MEDIUM 4.3 | 3.1 % | ||
| CVE-2020-1258 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1257 | | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1255 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles | HIGH 8.8 | 3.4 % | ||
| CVE-2020-1254 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally auth | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1253 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1251 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 0.9 % | ||
| CVE-2020-1247 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1246 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1244 | 2019 ; 2019 (Core installation) | A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Conn | HIGH 7.1 | 3.1 % | ||
| CVE-2020-1241 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilit | HIGH 7.8 | 3.3 % | ||
| CVE-2020-1239 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co | HIGH 8.8 | 6.1 % | ||
| CVE-2020-1238 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co | HIGH 8.8 | 7.2 % | ||
| CVE-2020-1237 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1236 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-1235 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1234 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabili | HIGH 7.8 | 4.8 % | ||
| CVE-2020-1233 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1232 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information | MEDIUM 6.5 | 6.0 % | ||
| CVE-2020-1231 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.5 % | ||
| CVE-2020-1222 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1217 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Informati | HIGH 7.8 | 4.5 % | ||
| CVE-2020-1212 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 3.5 % | ||
| CVE-2020-1211 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1208 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 15 % | ||
| CVE-2020-1207 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.2 % | ||
| CVE-2020-1204 | 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | HIGH 7.1 | 0.8 % | ||
| CVE-2020-1203 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1201 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows No | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1197 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error R | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1196 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configurati | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1194 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Ser | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1162 | 2019 (Core installation) ; 2019 ; version 1803 (Core Installation) | An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1160 | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) ; 2008 R2 for Itanium-Based Systems Service Pack 1 ; 2008 R2 for x64-based Systems Service Pack 1 ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.6 % | ||
| CVE-2020-0986 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 16 % | KEV | |
| CVE-2020-0916 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0915 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1094 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1029 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1027 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o | HIGH 7.8 | 4.7 % | KEV | |
| CVE-2020-1020 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially | HIGH 8.8 | 65 % | KEV | |
| CVE-2020-1017 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1016 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1015 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows El | HIGH 7.8 | 2.6 % | ||
| CVE-2020-1014 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Micr | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1011 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elev | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1009 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected loca | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1008 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-1007 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1006 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1005 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1004 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1003 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1001 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1000 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0999 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0996 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0995 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 18 % | ||
| CVE-2020-0994 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0993 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnera | MEDIUM 6.5 | 5.2 % | ||
| CVE-2020-0992 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0988 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0987 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.7 % | ||
| CVE-2020-0985 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0983 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win | HIGH 7.8 | 1.1 % | ||
| CVE-2020-0982 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-0965 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Win | HIGH 7.8 | 2.1 % | ||
| CVE-2020-0964 | version 1803 (Core Installation) ; 2019 ; 2019 (Core installation) ; … | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 19 % |