Windows Server 2019
by Microsoft
CVEs (4,947)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-17071 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Delivery Optimization Information Disclosure Vulnerability | ||
| CVE-2020-17069 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows NDIS Information Disclosure Vulnerability | ||
| CVE-2020-17056 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Network File System Information Disclosure Vulnerability | ||
| CVE-2020-17046 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Error Reporting Denial of Service Vulnerability | ||
| CVE-2020-17045 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows KernelStream Information Disclosure Vulnerability | ||
| CVE-2020-17036 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Function Discovery SSDP Provider Information Disclosure Vulnerability | ||
| CVE-2020-17030 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows MSCTF Server Information Disclosure Vulnerability | ||
| CVE-2020-17029 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Canonical Display Driver Information Disclosure Vulnerability | ||
| CVE-2020-17013 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Win32k Information Disclosure Vulnerability | ||
| CVE-2020-17004 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Windows Graphics Component Information Disclosure Vulnerability | ||
| CVE-2020-17000 | Med | 0.36 | 5.5 | 0.01 | Nov 11, 2020 | Remote Desktop Protocol Client Information Disclosure Vulnerability | ||
| CVE-2020-16921 | Med | 0.36 | 5.5 | 0.01 | Oct 16, 2020 | An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this… | ||
| CVE-2020-16919 | Med | 0.36 | 5.5 | 0.01 | Oct 16, 2020 | An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files. An attacker with unprivileged access to a… | ||
| CVE-2020-16914 | Med | 0.36 | 5.5 | 0.01 | Oct 16, 2020 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code… | ||
| CVE-2020-16897 | Med | 0.36 | 5.5 | 0.01 | Oct 16, 2020 | An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit… | ||
| CVE-2020-16889 | Med | 0.36 | 5.5 | 0.01 | Oct 16, 2020 | An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this… | ||
| CVE-2020-1303 | Med | 0.36 | 5.5 | 0.04 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by… | ||
| CVE-2020-1256 | Med | 0.36 | 5.5 | 0.05 | Sep 11, 2020 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are… | ||
| CVE-2020-1250 | Med | 0.36 | 5.5 | 0.01 | Sep 11, 2020 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability,… | ||
| CVE-2020-1133 | Med | 0.36 | 5.5 | 0.01 | Sep 11, 2020 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this… |
- risk 0.36cvss 5.5epss 0.01
Windows Delivery Optimization Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows NDIS Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Network File System Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Error Reporting Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows KernelStream Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows MSCTF Server Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Canonical Display Driver Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Win32k Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Graphics Component Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Remote Desktop Protocol Client Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this…
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files. An attacker with unprivileged access to a…
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code…
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit…
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this…
- risk 0.36cvss 5.5epss 0.04
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by…
- risk 0.36cvss 5.5epss 0.05
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are…
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability,…
- risk 0.36cvss 5.5epss 0.01
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this…
Page 216 of 248