Microsoft

293 results · Clear filters · Feed

• Critical 9.0
  CVE-2020-1040 Exploited

  A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate inp…

  Microsoft Windows Server Windows
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0986 Exploited EPSS 16%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jun 9, 2020

  KEV Nov 3, 2021
• High 7.0
  CVE-2020-1054 Exploited Public exploit EPSS 54%

  Win32k Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 21, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-1027 Exploited

  An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV May 23, 2022
• High 8.8
  CVE-2020-1020 Exploited Public exploit EPSS 65%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0968 Exploited · Ransomware EPSS 31%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0938 Exploited EPSS 69%

  A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Apr 15, 2020

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2020-0796 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Feb 10, 2022
• High 7.8
  CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

  An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Mar 12, 2020

  KEV Jan 28, 2022
• High 8.8
  CVE-2020-0688 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …

  Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Cumulative Update 14 Microsoft Exchange Server 2019 Cumulative Update 3
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0683 Exploited Public exploit

  An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-0674 Exploited Public exploit EPSS 87%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Feb 11, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-0618 Exploited · Ransomware Public exploit Scanner template EPSS 99%

  A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…

  Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
  Feb 11, 2020

  KEV Sep 18, 2024
• Critical 9.8
  CVE-2020-0646 Exploited Public exploit EPSS 99%

  A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2020-0638 Exploited · Ransomware

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jan 14, 2020

  KEV May 23, 2022
• High 8.1
  CVE-2020-0601 Exploited Public exploit EPSS 89%

  Certificate validation bypass on Windows in crypto/x509

  A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go
  Jan 14, 2020

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Dec 10, 2019

  KEV Jan 10, 2022
• High 7.5
  CVE-2019-1429 Exploited Public exploit EPSS 77%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Nov 12, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1405 Exploited · Ransomware Public exploit EPSS 30%

  An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1385 Exploited · Ransomware

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1388 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Nov 12, 2019

  KEV Apr 7, 2023
• High 7.8
  CVE-2019-1322 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Oct 10, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1315 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Oct 10, 2019

  KEV Mar 15, 2022
• High 7.5
  CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Sep 23, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-1297 Exploited EPSS 22%

  A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

  Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel
  Sep 11, 2019

  KEV Mar 3, 2022
• High 7.8
  CVE-2019-1253 Exploited · Ransomware Public exploit EPSS 12%

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1214 Exploited

  An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1132 Exploited Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Jul 29, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1130 Exploited · Ransomware

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 29, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1129 Exploited · Ransomware

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 29, 2019

  KEV Mar 15, 2022
• High 8.8
  CVE-2019-1068 Exploited Public exploit EPSS 57%

  A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal…

  Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
  Jul 15, 2019

  KEV Aug 26, 2026
• High 7.8
  CVE-2019-0880 Exploited

  A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Jul 15, 2019

  KEV May 23, 2022
• High 7.8
  CVE-2019-1064 Exploited · Ransomware Public exploit

  Windows Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install p…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 12, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1069 Exploited · Ransomware Public exploit

  Task Scheduler Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 12, 2019

  KEV Mar 15, 2022
• High 8.8
  CVE-2019-0903 Exploited EPSS 22%

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Mar 25, 2022
• High 7.8
  CVE-2019-0863 Exploited Public exploit

  An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

  Microsoft Windows Windows Server Windows
  May 16, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0859 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0841 Exploited · Ransomware Public exploit EPSS 41%

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Mar 15, 2022