VendorsMicrosoftwindows_101709
Vulnerabilities

Microsoft Windows 10 1709

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1679CVEs
CVE-2020-1236
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1208.
Published 2020-06-09 · Modified
9.3EPSS 0.115
CVE-2020-1410
A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book (WAB), aka 'Windows Address Book Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
9.3EPSS 0.115
CVE-2019-1102
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
Published 2019-07-29 · Modified
9.3EPSS 0.113
CVE-2019-0888
ActiveX Data Objects (ADO) Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.111
CVE-2020-1407
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1401.
Published 2020-07-14 · Modified
9.3EPSS 0.109
CVE-2020-0816
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.
Published 2020-03-12 · Modified
9.3EPSS 0.107
CVE-2020-1073
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
Published 2020-06-09 · Modified
9.3EPSS 0.086
CVE-2017-11827
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability".
Published 2017-11-15 · Modified
9.3EPSS 0.076
CVE-2020-1013
Group Policy Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
9.3EPSS 0.064
CVE-2020-0738
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.
Published 2020-02-11 · Modified
9.3EPSS 0.061
CVE-2020-1113
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.
Published 2020-05-21 · Modified
9.3EPSS 0.061
CVE-2019-0906
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.057
CVE-2020-1408
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
9.3EPSS 0.056
CVE-2020-0809
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0869.
Published 2020-03-12 · Modified
9.3EPSS 0.056
CVE-2020-0949
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.
Published 2020-04-15 · Modified
9.3EPSS 0.052
CVE-2020-0948
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.
Published 2020-04-15 · Modified
9.3EPSS 0.052
CVE-2020-0950
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.
Published 2020-04-15 · Modified
9.3EPSS 0.052
CVE-2020-0922
Microsoft COM for Windows Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.3EPSS 0.049
CVE-2020-0997
Windows Camera Codec Pack Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.3EPSS 0.049
CVE-2020-16968
Windows Camera Codec Pack Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.049
CVE-2019-1183
Windows VBScript Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.048
CVE-2020-1167
Microsoft Graphics Components Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.047
CVE-2020-1319
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.3EPSS 0.047
CVE-2019-0908
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.046
CVE-2020-1555
Scripting Engine Memory Corruption Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.045
CVE-2019-1157
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.045
CVE-2019-1146
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.045
CVE-2020-16911
GDI+ Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.045
CVE-2019-1147
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.043
CVE-2019-1156
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.043
CVE-2019-1155
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-08-14 · Modified
9.3EPSS 0.043
CVE-2020-1039
Jet Database Engine Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
9.3EPSS 0.043
CVE-2020-1561
Microsoft Graphics Components Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.043
CVE-2020-16967
Windows Camera Codec Pack Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.042
CVE-2019-0734
An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator.The update addresses this vulnerability by changing how these requests are validated., aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0936.
Published 2019-05-16 · Modified
9.3EPSS 0.042
CVE-2020-1558
Jet Database Engine Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.042
CVE-2020-16924
Jet Database Engine Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.041
CVE-2019-0907
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.041
CVE-2019-0904
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.041
CVE-2019-0905
Jet Database Engine Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.3EPSS 0.041
← Prev5 / 42Next →