Windows Server 2003

Source repositories

https://github.com/microsoft/msquic

CVEs (4,741)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-0785	Microsoft Windows User Profile Service	Hig	0.46	7.1	0.01	Mar 12, 2020	An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2020-0730	Microsoft Windows User Profile Service	Hig	0.46	7.1	0.01	Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2019-1416	Microsoft Windows Subsystem for Linux	Hig	0.46	7.0	0.00	Nov 12, 2019	An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2019-1347	Microsoft Windows	Med	0.46	6.5	0.14	Oct 10, 2019	A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346.
CVE-2019-1346	Microsoft Windows	Med	0.46	6.5	0.10	Oct 10, 2019	A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347.
CVE-2019-1343	Microsoft Windows	Med	0.46	6.5	0.10	Oct 10, 2019	A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347.
CVE-2019-1245	Microsoft DirectWrite	Med	0.46	6.5	0.13	Sep 11, 2019	An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.
CVE-2019-1244	Microsoft DirectWrite	Med	0.46	6.5	0.12	Sep 11, 2019	An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.
CVE-2019-1037	Microsoft Windows Error Reporting	Hig	0.46	7.0	0.01	Jul 15, 2019	An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
CVE-2019-0931	Microsoft Windows	Hig	0.46	7.0	0.01	May 16, 2019	An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
CVE-2019-0707	Microsoft Windows	Hig	0.46	7.0	0.01	May 16, 2019	An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially…
CVE-2019-0659	Microsoft Windows	Hig	0.46	7.0	0.01	Mar 5, 2019	An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
CVE-2019-0656	Microsoft Windows Kernel	Hig	0.46	7.0	0.01	Mar 5, 2019	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2018-8333	Microsoft Filter Manager	Hig	0.46	7.0	0.02	Oct 10, 2018	An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2018-8404	Microsoft Windows	Hig	0.46	7.0	0.01	Aug 15, 2018	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server…
CVE-2018-8399	Microsoft Windows 10 Servers	Hig	0.46	7.0	0.01	Aug 15, 2018	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404.
CVE-2018-8339	Microsoft Windows Installer	Hig	0.46	7.0	0.01	Aug 15, 2018	An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows…
CVE-2018-8169	Microsoft Windows	Hig	0.46	7.0	0.01	Jun 14, 2018	An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-1036	Microsoft Windows	Hig	0.46	7.0	0.01	Jun 14, 2018	An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows…
CVE-2018-8170	Microsoft Windows 10 1607	Hig	0.46	7.0	0.01	May 9, 2018	An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

CVE-2020-0785HigMar 12, 2020
Microsoft
Windows User Profile Service
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2020-0730HigFeb 11, 2020
Microsoft
Windows User Profile Service
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
CVE-2019-1416HigNov 12, 2019
Microsoft
Windows Subsystem for Linux
risk 0.46cvss 7.0epss 0.00
An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2019-1347MedOct 10, 2019
Microsoft
Windows
risk 0.46cvss 6.5epss 0.14
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346.
CVE-2019-1346MedOct 10, 2019
Microsoft
Windows
risk 0.46cvss 6.5epss 0.10
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347.
CVE-2019-1343MedOct 10, 2019
Microsoft
Windows
risk 0.46cvss 6.5epss 0.10
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347.
CVE-2019-1245MedSep 11, 2019
Microsoft
DirectWrite
risk 0.46cvss 6.5epss 0.13
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.
CVE-2019-1244MedSep 11, 2019
Microsoft
DirectWrite
risk 0.46cvss 6.5epss 0.12
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.
CVE-2019-1037HigJul 15, 2019
Microsoft
Windows Error Reporting
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
CVE-2019-0931HigMay 16, 2019
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
CVE-2019-0707HigMay 16, 2019
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially…
CVE-2019-0659HigMar 5, 2019
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
CVE-2019-0656HigMar 5, 2019
Microsoft
Windows Kernel
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVE-2018-8333HigOct 10, 2018
Microsoft
Filter Manager
risk 0.46cvss 7.0epss 0.02
An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2018-8404HigAug 15, 2018
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server…
CVE-2018-8399HigAug 15, 2018
Microsoft
Windows 10 Servers
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404.
CVE-2018-8339HigAug 15, 2018
Microsoft
Windows Installer
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows…
CVE-2018-8169HigJun 14, 2018
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server…
CVE-2018-1036HigJun 14, 2018
Microsoft
Windows
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows…
CVE-2018-8170HigMay 9, 2018
Microsoft
Windows 10 1607
risk 0.46cvss 7.0epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Page 144 of 238