Windows Server 2016

CVEs (5,109)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1402	Microsoft Windows ActiveX Installer Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1399	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395	Microsoft Windows Speech Brokered API	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394	Microsoft Windows Geolocation Framework	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393	Microsoft Diagnostics Hub Standard Collector Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392	Microsoft Windows Delivery Optimization	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385	Microsoft Windows Credential Picker	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.
CVE-2020-1384	Microsoft Windows CNG Key Isolation Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.
CVE-2020-1382	Microsoft Windows Graphics component	Hig	0.51	7.8	0.05	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1381.
CVE-2020-1381	Microsoft Windows Graphics component	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1382.
CVE-2020-1375	Microsoft Windows	Hig	0.51	7.8	0.07	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
CVE-2020-1373	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1390, CVE-2020-1427,…
CVE-2020-1372	Microsoft Windows Mobile Device Management Diagnostics	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405.
CVE-2020-1371	Microsoft Windows Event Logging Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege…
CVE-2020-1370	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1369	Microsoft Windows WalletService	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1362.

CVE-2020-1402HigJul 14, 2020
Microsoft
Windows ActiveX Installer Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1399HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395HigJul 14, 2020
Microsoft
Windows Speech Brokered API
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394HigJul 14, 2020
Microsoft
Windows Geolocation Framework
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393HigJul 14, 2020
Microsoft
Diagnostics Hub Standard Collector Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392HigJul 14, 2020
Microsoft
Windows Delivery Optimization
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387HigJul 14, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385HigJul 14, 2020
Microsoft
Windows Credential Picker
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.
CVE-2020-1384HigJul 14, 2020
Microsoft
Windows CNG Key Isolation Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.
CVE-2020-1382HigJul 14, 2020
Microsoft
Windows Graphics component
risk 0.51cvss 7.8epss 0.05
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1381.
CVE-2020-1381HigJul 14, 2020
Microsoft
Windows Graphics component
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1382.
CVE-2020-1375HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.07
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
CVE-2020-1373HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1390, CVE-2020-1427,…
CVE-2020-1372HigJul 14, 2020
Microsoft
Windows Mobile Device Management Diagnostics
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405.
CVE-2020-1371HigJul 14, 2020
Microsoft
Windows Event Logging Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege…
CVE-2020-1370HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1369HigJul 14, 2020
Microsoft
Windows WalletService
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1362.

Page 108 of 256