Vendor CVEs

Microsoft

All CVEs

15,666 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1509	Microsoft Local Security Authority Subsystem Service	Hig	0.51	7.8	0.03	Aug 17, 2020	An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of…
CVE-2020-1492	Microsoft Windows Media Foundation	Hig	0.51	7.8	0.03	Aug 17, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1490	Microsoft Storage Service	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have…
CVE-2020-1489	Microsoft Windows CSC Service	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate…
CVE-2020-1487	Microsoft Media Foundation	Hig	0.51	7.8	0.04	Aug 17, 2020	An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker…
CVE-2020-1486	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete…
CVE-2020-1484	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
CVE-2020-1480	Microsoft Windows Graphics Device Interface	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view,…
CVE-2020-1479	Microsoft Directx	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create…
CVE-2020-1478	Microsoft Windows Media Foundation	Hig	0.51	7.8	0.03	Aug 17, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1475	Microsoft srmsvc.dll	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…
CVE-2020-1474	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01	Aug 17, 2020	An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit…
CVE-2020-1470	Microsoft Windows Server 2008	Hig	0.51	7.8	0.01	Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
CVE-2020-1466	Microsoft Windows Remote Desktop Gateway	Hig	0.51	7.8	0.04	Aug 17, 2020	A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on…
CVE-2020-1377	Microsoft Windows Kernel	Hig	0.51	7.8	0.02	Aug 17, 2020	An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit…
CVE-2020-1339	Microsoft Windows Media Audio Codec	Hig	0.51	7.8	0.03	Aug 17, 2020	A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as…
CVE-2020-1046	Microsoft .net Framework	Hig	0.51	7.8	0.04	Aug 17, 2020	A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially…
CVE-2020-0604	Microsoft Visual Studio Code	Hig	0.51	7.8	0.04	Aug 17, 2020	A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged…
CVE-2020-1425	Microsoft Windows Codecs Library	Hig	0.51	7.8	0.09	Jul 27, 2020	A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.
CVE-2020-1465	Microsoft OneDrive	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft OneDrive Elevation of Privilege Vulnerability'.
CVE-2020-1463	Microsoft Windows SharedStream Library	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
CVE-2020-1449	Microsoft Project	Hig	0.51	7.8	0.05	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
CVE-2020-1438	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1437	Microsoft Windows Network Location Awareness Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.
CVE-2020-1431	Microsoft Windows AppX Deployment Extensions	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to…
CVE-2020-1430	Microsoft Windows UPnP Device Host	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'.…
CVE-2020-1429	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-1428	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1427	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1424	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'.
CVE-2020-1423	Microsoft Windows Subsystem For Linux	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2020-1422	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1418	Microsoft Windows Diagnostics Execution Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from…
CVE-2020-1415	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1414	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1413	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1411	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.
CVE-2020-1406	Microsoft Windows Network List Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-1404	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413,…
CVE-2020-1402	Microsoft Windows ActiveX Installer Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1399	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395	Microsoft Windows Speech Brokered API	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394	Microsoft Windows Geolocation Framework	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393	Microsoft Diagnostics Hub Standard Collector Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392	Microsoft Windows Delivery Optimization	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385	Microsoft Windows Credential Picker	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.

CVE-2020-1509HigAug 17, 2020
Microsoft
Local Security Authority Subsystem Service
risk 0.51cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of…
CVE-2020-1492HigAug 17, 2020
Microsoft
Windows Media Foundation
risk 0.51cvss 7.8epss 0.03
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1490HigAug 17, 2020
Microsoft
Storage Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have…
CVE-2020-1489HigAug 17, 2020
Microsoft
Windows CSC Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate…
CVE-2020-1487HigAug 17, 2020
Microsoft
Media Foundation
risk 0.51cvss 7.8epss 0.04
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker…
CVE-2020-1486HigAug 17, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete…
CVE-2020-1484HigAug 17, 2020
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
CVE-2020-1480HigAug 17, 2020
Microsoft
Windows Graphics Device Interface
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view,…
CVE-2020-1479HigAug 17, 2020
Microsoft
Directx
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create…
CVE-2020-1478HigAug 17, 2020
Microsoft
Windows Media Foundation
risk 0.51cvss 7.8epss 0.03
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1475HigAug 17, 2020
Microsoft
srmsvc.dll
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…
CVE-2020-1474HigAug 17, 2020
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit…
CVE-2020-1470HigAug 17, 2020
Microsoft
Windows Server 2008
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to…
CVE-2020-1466HigAug 17, 2020
Microsoft
Windows Remote Desktop Gateway
risk 0.51cvss 7.8epss 0.04
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on…
CVE-2020-1377HigAug 17, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit…
CVE-2020-1339HigAug 17, 2020
Microsoft
Windows Media Audio Codec
risk 0.51cvss 7.8epss 0.03
A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as…
CVE-2020-1046HigAug 17, 2020
Microsoft
.net Framework
risk 0.51cvss 7.8epss 0.04
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially…
CVE-2020-0604HigAug 17, 2020
Microsoft
Visual Studio Code
risk 0.51cvss 7.8epss 0.04
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged…
CVE-2020-1425HigJul 27, 2020
Microsoft
Windows Codecs Library
risk 0.51cvss 7.8epss 0.09
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.
CVE-2020-1465HigJul 14, 2020
Microsoft
OneDrive
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft OneDrive Elevation of Privilege Vulnerability'.
CVE-2020-1463HigJul 14, 2020
Microsoft
Windows SharedStream Library
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
CVE-2020-1449HigJul 14, 2020
Microsoft
Project
risk 0.51cvss 7.8epss 0.05
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
CVE-2020-1438HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1437HigJul 14, 2020
Microsoft
Windows Network Location Awareness Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.
CVE-2020-1431HigJul 14, 2020
Microsoft
Windows AppX Deployment Extensions
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to…
CVE-2020-1430HigJul 14, 2020
Microsoft
Windows UPnP Device Host
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'.…
CVE-2020-1429HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-1428HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1427HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1424HigJul 14, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'.
CVE-2020-1423HigJul 14, 2020
Microsoft
Windows Subsystem For Linux
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2020-1422HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1418HigJul 14, 2020
Microsoft
Windows Diagnostics Execution Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from…
CVE-2020-1415HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1414HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1413HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1411HigJul 14, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.
CVE-2020-1406HigJul 14, 2020
Microsoft
Windows Network List Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-1404HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413,…
CVE-2020-1402HigJul 14, 2020
Microsoft
Windows ActiveX Installer Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1399HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395HigJul 14, 2020
Microsoft
Windows Speech Brokered API
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394HigJul 14, 2020
Microsoft
Windows Geolocation Framework
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393HigJul 14, 2020
Microsoft
Diagnostics Hub Standard Collector Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392HigJul 14, 2020
Microsoft
Windows Delivery Optimization
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387HigJul 14, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385HigJul 14, 2020
Microsoft
Windows Credential Picker
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.

Page 101 of 314