VendorsMicrosoftwindows_101803
Vulnerabilities

Microsoft Windows 10 1803

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1790CVEs
CVE-2019-0573
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0574.
Published 2019-01-08 · Modified
7.81 PoCEPSS 0.201
CVE-2019-0574
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0573.
Published 2019-01-08 · Modified
7.81 PoCEPSS 0.194
CVE-2020-1048
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
Published 2020-05-21 · Modified
7.8EPSS 0.164
CVE-2019-0571
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0572, CVE-2019-0573, CVE-2019-0574.
Published 2019-01-08 · Modified
7.81 PoCEPSS 0.158
CVE-2020-1337
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.141
CVE-2020-17136
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2020-12-09 · Modified
7.8EPSS 0.140
CVE-2018-8226
A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Published 2018-06-14 · Modified
7.8EPSS 0.139
CVE-2020-0708
A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting how the Windows Imaging Library handles memory., aka 'Windows Imaging Library Remote Code Execution Vulnerability'.
Published 2020-02-11 · Modified
7.8EPSS 0.135
CVE-2020-16899
Windows TCP/IP Denial of Service Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.135
CVE-2020-1457
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.
Published 2020-07-27 · Modified
7.8EPSS 0.124
CVE-2021-26863
Windows Win32k Elevation of Privilege Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.118
CVE-2018-8206
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-07-11 · Modified
7.8EPSS 0.115
CVE-2019-1159
Windows Kernel Elevation of Privilege Vulnerability
Published 2019-08-14 · Modified
7.8EPSS 0.113
CVE-2019-0879
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.
Published 2019-04-09 · Modified
7.8EPSS 0.098
CVE-2020-1425
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.
Published 2020-07-27 · Modified
7.8EPSS 0.093
CVE-2018-8335
A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Modified
7.8EPSS 0.090
CVE-2019-1484
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
Published 2019-12-10 · Modified
7.8EPSS 0.089
CVE-2018-8213
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210.
Published 2018-06-14 · Modified
7.8EPSS 0.086
CVE-2020-1577
DirectWrite Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.071
CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
Published 2020-07-14 · Modified
7.8EPSS 0.067
CVE-2019-1326
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
Published 2019-10-10 · Modified
7.8EPSS 0.065
CVE-2018-0952
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
Published 2018-08-15 · Modified
7.81 PoCEPSS 0.062
CVE-2019-0623
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Published 2019-03-06 · Modified
7.8EPSS 0.059
CVE-2020-16927
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.059
CVE-2019-1025
Windows Denial of Service Vulnerability
Published 2019-06-12 · Modified
7.8EPSS 0.054
CVE-2019-1476
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Published 2019-12-10 · Modified
7.81 PoCEPSS 0.051
CVE-2019-0877
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.
Published 2019-04-09 · Modified
7.8EPSS 0.049
CVE-2019-1089
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.
Published 2019-07-15 · Modified
7.81 PoCEPSS 0.049
CVE-2020-1034
Windows Kernel Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.049
CVE-2020-1234
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
7.8EPSS 0.047
CVE-2020-1217
An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulnerability'.
Published 2020-06-09 · Modified
7.8EPSS 0.044
CVE-2019-0730
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2019-0731
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.044
CVE-2019-0836
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.
Published 2019-04-09 · Modified
7.81 PoCEPSS 0.043
CVE-2020-1303
Windows Runtime Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.043
CVE-2021-27095
Windows Media Video Decoder Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.041
CVE-2018-8410
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Modified
7.81 PoCEPSS 0.040
CVE-2020-17022
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.039
CVE-2020-1252
Windows Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
7.8EPSS 0.039
CVE-2020-1512
Windows State Repository Service Information Disclosure Vulnerability
Published 2020-08-17 · Modified
7.8EPSS 0.039
← Prev10 / 45Next →