VendorsMicrosoftwindows_101903
Vulnerabilities

Microsoft Windows 10 1903

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1239CVEs
CVE-2019-1399
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310.
Published 2019-11-12 · Modified
6.2EPSS 0.017
CVE-2020-1055
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.
Published 2020-05-21 · Modified
6.1EPSS 0.024
CVE-2020-1220
A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'.
Published 2020-06-09 · Modified
6.1EPSS 0.018
CVE-2019-1470
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
Published 2019-12-10 · Modified
6.0EPSS 0.068
CVE-2020-0751
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0661.
Published 2020-02-11 · Modified
6.0EPSS 0.014
CVE-2019-1166
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.
Published 2019-10-10 · Modified
5.9EPSS 0.681
CVE-2019-1040
Windows NTLM Tampering Vulnerability
Published 2019-06-12 · Modified
5.9EPSS 0.480
CVE-2019-1318
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
Published 2019-10-10 · Modified
5.9EPSS 0.035
CVE-2019-0717
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.051
CVE-2019-0718
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0714
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0723
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0715
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-1125
Windows Kernel Information Disclosure Vulnerability
Published 2019-09-03 · Modified
5.61 PoCEPSS 0.045
CVE-2019-1171
SymCrypt Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.6EPSS 0.014
CVE-2020-1599
Windows Spoofing Vulnerability
Published 2020-11-11 · Modified
5.5EPSS 0.191
CVE-2019-0948
Windows Event Viewer Information Disclosure Vulnerability
Published 2019-06-12 · Modified
5.51 PoCEPSS 0.127
CVE-2020-0939
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.087
CVE-2019-1374
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
5.5EPSS 0.071
CVE-2020-0937
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0945
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0946
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0947
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0946.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0607
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
Published 2020-01-14 · Modified
5.5EPSS 0.059
CVE-2020-0746
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
Published 2020-02-11 · Modified
5.5EPSS 0.051
CVE-2019-1096
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Published 2019-07-15 · Modified
5.5EPSS 0.048
CVE-2020-1510
Win32k Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.048
CVE-2020-0875
Microsoft splwow64 Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.5EPSS 0.044
CVE-2019-1046
Windows GDI Information Disclosure Vulnerability
Published 2019-06-12 · Modified
5.5EPSS 0.043
CVE-2020-0728
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
Published 2020-02-11 · Modified
5.5EPSS 0.037
CVE-2020-16937
.NET Framework Information Disclosure Vulnerability
Published 2020-10-16 · Modified
5.5EPSS 0.033
CVE-2019-1187
XmlLite Runtime Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.5EPSS 0.031
CVE-2019-1344
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
Published 2019-10-10 · Modified
5.51 PoCEPSS 0.031
CVE-2019-1345
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
Published 2019-10-10 · Modified
5.51 PoCEPSS 0.030
CVE-2019-1148
Microsoft Graphics Component Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.51 PoCEPSS 0.028
CVE-2019-1153
Microsoft Graphics Component Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.51 PoCEPSS 0.028
CVE-2019-1071
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.
Published 2019-07-15 · Modified
5.5EPSS 0.026
CVE-2019-1073
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.
Published 2019-07-15 · Modified
5.5EPSS 0.026
CVE-2019-1334
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1345.
Published 2019-10-10 · Modified
5.5EPSS 0.023
CVE-2019-1337
An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'.
Published 2019-10-10 · Modified
5.5EPSS 0.022
← Prev27 / 31Next →