Microsoft Windows
747 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-59033 | 10 – Server 2025 | The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only t | HIGH 7.4 | 0.3 % | ||
| CVE-2022-50238 | 10 – Server 2025 | The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. So | HIGH 7.4 | 0.2 % | ||
| CVE-2025-9491 | 11 Enterprise 23H2 22631.4169 x64 | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability | MEDIUM 4.6 | 76 % | ||
| CVE-2022-40733 | Build 22000.593 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-40732 | Build 22000.593 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Wind | HIGH 7.5 | 0.8 % | ||
| CVE-2020-1468 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows | MEDIUM 6.5 | 5.2 % | ||
| CVE-2020-1463 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1438 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1437 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1436 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except | HIGH 8.8 | 21 % | ||
| CVE-2020-1435 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 14 % | ||
| CVE-2020-1434 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Ho | MEDIUM 5.3 | 0.8 % | ||
| CVE-2020-1431 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulti | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1430 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1429 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error R | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1428 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1427 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1426 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1424 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 1.4 % | ||
| CVE-2020-1422 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1421 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta | HIGH 8.8 | 75 % | ||
| CVE-2020-1420 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1419 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel In | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1418 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to a | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1415 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1414 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1413 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1412 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics | HIGH 8.8 | 14 % | ||
| CVE-2020-1411 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1410 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, | HIGH 7.8 | 12 % | ||
| CVE-2020-1409 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V | HIGH 7.8 | 12 % | ||
| CVE-2020-1408 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microso | HIGH 8.8 | 5.6 % | ||
| CVE-2020-1407 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 11 % | ||
| CVE-2020-1406 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Netw | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1405 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | HIGH 7.1 | 0.8 % | ||
| CVE-2020-1404 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1402 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1401 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 13 % | ||
| CVE-2020-1400 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 24 % | ||
| CVE-2020-1399 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1398 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who succes | MEDIUM 6.8 | 1.2 % | ||
| CVE-2020-1397 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka | MEDIUM 6.5 | 6.4 % | ||
| CVE-2020-1396 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1395 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Eleva | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1394 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Ele | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1393 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1392 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1390 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1389 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel In | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1388 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1387 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1386 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1385 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credent | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1384 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1375 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Pri | HIGH 7.8 | 6.9 % | ||
| CVE-2020-1374 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De | HIGH 7.5 | 9.1 % | ||
| CVE-2020-1373 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1372 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1371 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilit | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1370 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1369 | 10 Version 1709 for x64-based Systems ; 10 Version 1709 for 32-bit Systems ; 10 Version 1809 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1368 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Win | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1367 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1366 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Pr | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1365 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilit | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1364 | 10 Version 1809 for x64-based Systems ; 10 Version 1709 for 32-bit Systems ; 10 Version 1809 for 32-bit Systems ; … | A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulne | HIGH 7.1 | 0.7 % | ||
| CVE-2020-1363 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1362 | 10 Version 1709 for 32-bit Systems ; 10 Version 1709 for x64-based Systems ; 10 Version 1709 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 2.5 % | ||
| CVE-2020-1361 | 10 Version 1809 for ARM64-based Systems ; 10 Version 1709 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker wo | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1360 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Ser | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1359 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1358 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerab | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1357 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1354 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1353 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1352 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1351 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Grap | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1347 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Ser | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1346 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules I | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1344 | 10 Version 1607 for 32-bit Systems ; 10 for x64-based Systems ; 10 Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1333 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Pol | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1330 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1267 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated att | MEDIUM 4.9 | 4.5 % | ||
| CVE-2020-1249 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1085 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Window | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1348 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows | MEDIUM 6.5 | 5.4 % | ||
| CVE-2020-1334 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.7 % | ||
| CVE-2020-1324 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1317 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerab | HIGH 8.8 | 4.3 % | ||
| CVE-2020-1316 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1314 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1312 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1311 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1310 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1309 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 3.8 % | ||
| CVE-2020-1306 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1305 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1304 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1302 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1301 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, | HIGH 8.8 | 44 % | ||
| CVE-2020-1300 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an | HIGH 8.8 | 60 % | ||
| CVE-2020-1299 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta | HIGH 8.8 | 15 % | ||
| CVE-2020-1296 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1294 | 10 Version 1803 for 32-bit Systems ; 10 Version 1709 for x64-based Systems ; 10 Version 1809 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1293 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1292 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, a | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1291 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windo | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1290 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1287 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1286 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully explo | HIGH 8.8 | 12 % | ||
| CVE-2020-1283 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. | MEDIUM 6.5 | 8.8 % | ||
| CVE-2020-1282 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1281 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code | HIGH 8.8 | 15 % | ||
| CVE-2020-1280 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetoo | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1279 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1278 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1277 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1276 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1274 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1272 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1271 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabil | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1270 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevatio | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1269 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1266 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1264 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1263 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1262 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1261 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Report | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1259 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Window | MEDIUM 4.3 | 3.1 % | ||
| CVE-2020-1258 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1257 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka ' | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1255 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles | HIGH 8.8 | 3.4 % | ||
| CVE-2020-1254 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally auth | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1253 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 1.0 % | ||
| CVE-2020-1251 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | MEDIUM 6.7 | 0.9 % | ||
| CVE-2020-1247 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1246 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1244 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Conn | HIGH 7.1 | 3.1 % | ||
| CVE-2020-1241 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1809 for 32-bit Systems ; … | A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilit | HIGH 7.8 | 3.3 % | ||
| CVE-2020-1239 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co | HIGH 8.8 | 6.1 % | ||
| CVE-2020-1238 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co | HIGH 8.8 | 7.2 % | ||
| CVE-2020-1237 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o | HIGH 7.8 | 3.2 % | ||
| CVE-2020-1236 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-1235 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1234 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabili | HIGH 7.8 | 4.8 % | ||
| CVE-2020-1233 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.4 % | ||
| CVE-2020-1232 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information | MEDIUM 6.5 | 6.0 % | ||
| CVE-2020-1231 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation | HIGH 7.8 | 3.5 % | ||
| CVE-2020-1222 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1217 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Informati | HIGH 7.8 | 4.5 % | ||
| CVE-2020-1212 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an | HIGH 7.8 | 3.5 % | ||
| CVE-2020-1211 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connec | HIGH 7.8 | 3.1 % | ||
| CVE-2020-1208 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 15 % | ||
| CVE-2020-1207 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.2 % | ||
| CVE-2020-1204 | 10 Version 1809 for 32-bit Systems ; 10 Version 1809 for x64-based Systems ; 10 Version 1809 for ARM64-based Systems | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Wi | HIGH 7.1 | 0.8 % | ||
| CVE-2020-1203 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1202 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to p | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1201 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows No | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1199 | 10 Version 1709 for x64-based Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1809 for x64-based Systems | An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1197 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error R | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1196 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configurati | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1194 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Ser | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1162 | 10 Version 1803 for ARM64-based Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1709 for x64-based Systems ; … | An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To | HIGH 7.8 | 0.8 % | ||
| CVE-2020-1160 | 10 Version 1803 for 32-bit Systems ; 10 for 32-bit Systems ; 10 Version 1809 for 32-bit Systems ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.6 % | ||
| CVE-2020-0986 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 16 % | KEV | |
| CVE-2020-0916 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0915 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'W | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1094 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1029 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1027 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o | HIGH 7.8 | 4.7 % | KEV | |
| CVE-2020-1020 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially | HIGH 8.8 | 65 % | KEV | |
| CVE-2020-1017 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1016 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1015 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows El | HIGH 7.8 | 2.6 % | ||
| CVE-2020-1014 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Micr | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1011 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elev | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1009 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected loca | HIGH 7.8 | 1.0 % | ||
| CVE-2020-1008 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-1007 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information | MEDIUM 5.5 | 1.3 % | ||
| CVE-2020-1006 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1005 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-1004 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1003 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1001 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push | HIGH 7.8 | 0.9 % | ||
| CVE-2020-1000 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0999 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0996 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0995 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 18 % | ||
| CVE-2020-0994 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0993 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnera | MEDIUM 6.5 | 5.2 % | ||
| CVE-2020-0992 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0988 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2020-0987 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.7 % | ||
| CVE-2020-0985 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update | HIGH 7.8 | 0.9 % | ||
| CVE-2020-0983 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win | HIGH 7.8 | 1.1 % | ||
| CVE-2020-0982 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr | MEDIUM 5.5 | 1.4 % | ||
| CVE-2020-0965 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Win | HIGH 7.8 | 2.1 % | ||
| CVE-2020-0964 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 19 % | ||
| CVE-2020-0962 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis | MEDIUM 5.5 | 1.5 % | ||
| CVE-2020-0960 | 10 Version 1803 for 32-bit Systems ; 10 Version 1803 for x64-based Systems ; 10 Version 1803 for ARM64-based Systems ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 12 % |