Windows 10 1607
by Microsoft
CVEs (3,413)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-0951 | 0.00 | — | 0.07 | Sep 11, 2020 | A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by… | |||
| CVE-2020-0941 | 0.00 | — | 0.01 | Sep 11, 2020 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability,… | |||
| CVE-2020-0921 | 0.00 | — | 0.01 | Sep 11, 2020 | Microsoft Graphics Component Denial of Service Vulnerability | |||
| CVE-2020-0914 | 0.00 | — | 0.01 | Sep 11, 2020 | An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An attacker… | |||
| CVE-2020-0912 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially… | |||
| CVE-2020-0908 | 0.00 | — | 0.03 | Sep 11, 2020 | A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is… | |||
| CVE-2020-0911 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability… | |||
| CVE-2020-0904 | 0.00 | — | 0.01 | Sep 11, 2020 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest… | |||
| CVE-2020-0886 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code… | |||
| CVE-2020-0870 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker… | |||
| CVE-2020-0839 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated… | |||
| CVE-2020-0838 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system,… | |||
| CVE-2020-0837 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication… | |||
| CVE-2020-0790 | 0.00 | — | 0.01 | Sep 11, 2020 | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself… | |||
| CVE-2020-0782 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an… | |||
| CVE-2020-0766 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to… | |||
| CVE-2020-0648 | 0.00 | — | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted… | |||
| CVE-2020-1587 | 0.00 | — | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted… | |||
| CVE-2020-1584 | 0.00 | — | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could… | |||
| CVE-2020-1579 | 0.00 | — | 0.01 | Aug 17, 2020 | An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted… |
- CVE-2020-0951Sep 11, 2020risk 0.00cvss —epss 0.07
A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by…
- CVE-2020-0941Sep 11, 2020risk 0.00cvss —epss 0.01
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability,…
- CVE-2020-0921Sep 11, 2020risk 0.00cvss —epss 0.01
Microsoft Graphics Component Denial of Service Vulnerability
- CVE-2020-0914Sep 11, 2020risk 0.00cvss —epss 0.01
An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An attacker…
- CVE-2020-0912Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially…
- CVE-2020-0908Sep 11, 2020risk 0.00cvss —epss 0.03
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is…
- CVE-2020-0911Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability…
- CVE-2020-0904Sep 11, 2020risk 0.00cvss —epss 0.01
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest…
- CVE-2020-0886Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code…
- CVE-2020-0870Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker…
- CVE-2020-0839Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated…
- CVE-2020-0838Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system,…
- CVE-2020-0837Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication…
- CVE-2020-0790Sep 11, 2020risk 0.00cvss —epss 0.01
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself…
- CVE-2020-0782Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an…
- CVE-2020-0766Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
- CVE-2020-0648Sep 11, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted…
- CVE-2020-1587Aug 17, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted…
- CVE-2020-1584Aug 17, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…
- CVE-2020-1579Aug 17, 2020risk 0.00cvss —epss 0.01
An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted…
Page 166 of 171