Platform

Windows

10,645 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

621 results · Clear filters · Feed

Unscored —

CVE-2020-1362 Public exploit

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Critical 10.0

CVE-2020-1350 Exploited Public exploit EPSS 97%

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle re…

Microsoft Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server Windows

Jul 14, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-1147 Exploited Public exploit EPSS 96%

.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet

Jul 14, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-1313 Public exploit EPSS 39%

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jun 9, 2020
Unscored —

CVE-2020-1301 Public exploit EPSS 44%

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jun 9, 2020
Unscored —

CVE-2020-1283 Public exploit

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jun 9, 2020
Unscored —

CVE-2020-1206 Public exploit EPSS 11%

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protoco…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jun 9, 2020
Unscored —

CVE-2020-9850 Public exploit EPSS 77%

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
High 8.8

CVE-2020-9802 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Jun 9, 2020
High 7.0

CVE-2020-1054 Exploited Public exploit EPSS 54%

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 21, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-1048 Public exploit EPSS 17%

Windows Print Spooler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. A…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 21, 2020
Unscored —

CVE-2020-5752 Public exploit

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitr…

Windows

May 21, 2020
High 7.2

CVE-2020-5741 Exploited Public exploit EPSS 73%

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

Windows

May 8, 2020
KEV Mar 10, 2023
High 8.8

CVE-2020-1020 Exploited Public exploit EPSS 65%

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Apr 15, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-1015 Public exploit

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in me…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Apr 15, 2020
Unscored —

CVE-2020-0910 Public exploit

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows

Apr 15, 2020
Unscored —

CVE-2020-0887 Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
Critical 10.0

CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Feb 10, 2022
High 7.8

CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Mar 12, 2020
KEV Jan 28, 2022
Unscored —

CVE-2019-3999 Public exploit

Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, …

Windows

Feb 25, 2020
Unscored —

CVE-2020-0753 Public exploit

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0728 Public exploit

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
High 7.8

CVE-2020-0683 Exploited Public exploit

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
KEV Nov 3, 2021
High 7.5

CVE-2020-0674 Exploited Public exploit EPSS 87%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows

Feb 11, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-0668 Public exploit EPSS 26%

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0665 Public exploit

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Critical 9.8

CVE-2020-0646 Exploited Public exploit EPSS 99%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows

Jan 14, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-0624 Public exploit

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jan 14, 2020
Unscored —

CVE-2020-0609 Public exploit EPSS 78%

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated att…

Microsoft Windows Server Windows

Jan 14, 2020
Unscored —

CVE-2020-0610 Public exploit EPSS 68%

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated att…

Microsoft Windows Server Windows

Jan 14, 2020
High 8.1

CVE-2020-0601 Exploited Public exploit EPSS 89%

Certificate validation bypass on Windows in crypto/x509

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go

Jan 14, 2020
KEV Nov 3, 2021
Unscored —

CVE-2019-8820 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…

Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8689 Public exploit EPSS 14%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8690 Public exploit

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8671 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8672 Public exploit EPSS 11%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8649 Public exploit

A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state managemen…

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu Alpine

Dec 18, 2019
Unscored —

CVE-2019-8622 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8611 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8623 Public exploit

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019