VendorsMicrosoftwindows_101903
Vulnerabilities

Microsoft Windows 10 1903

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1239CVEs
CVE-2019-0721
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719.
Published 2019-11-12 · Modified
9.1EPSS 0.120
CVE-2019-0719
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721.
Published 2019-11-12 · Modified
9.1EPSS 0.114
CVE-2020-17096
Windows NTFS Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.0EPSS 0.195
CVE-2020-0662
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.
Published 2020-02-11 · Modified
9.0EPSS 0.133
CVE-2019-0722
Windows Hyper-V Remote Code Execution Vulnerability
Published 2019-06-12 · Modified
9.0EPSS 0.047
CVE-2020-1317
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
9.0EPSS 0.044
CVE-2019-0938
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
Published 2019-05-16 · Modified
9.0EPSS 0.034
CVE-2020-1067
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.
Published 2020-05-21 · Modified
9.0EPSS 0.025
CVE-2020-1300
A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious cabinet file disguised as a printer driver.The update addresses the vulnerability by correcting how Windows handles cabinet files., aka 'Windows Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.594
CVE-2020-1301
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.438
CVE-2020-0729
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.
Published 2020-02-11 · Modified
8.8EPSS 0.309
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
8.8EPSS 0.213
CVE-2020-1281
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.145
CVE-2019-1419
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1456.
Published 2019-11-12 · Modified
8.8EPSS 0.116
CVE-2020-16898
Windows TCP/IP Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
8.8EPSS 0.109
CVE-2019-1113
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.
Published 2019-07-29 · Modified
8.8EPSS 0.100
CVE-2020-16915
Media Foundation Memory Corruption Vulnerability
Published 2020-10-16 · Modified
8.8EPSS 0.098
CVE-2019-1456
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.
Published 2019-11-12 · Modified
8.8EPSS 0.097
CVE-2020-0684
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.
Published 2020-03-12 · Modified
8.8EPSS 0.090
CVE-2020-1238
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239.
Published 2020-06-09 · Modified
8.8EPSS 0.070
CVE-2020-1239
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.
Published 2020-06-09 · Modified
8.8EPSS 0.059
CVE-2020-0801
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0807, CVE-2020-0809, CVE-2020-0869.
Published 2020-03-12 · Modified
8.8EPSS 0.053
CVE-2019-0995
A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'.
Published 2019-05-16 · Modified
8.8EPSS 0.049
CVE-2020-1585
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
8.8EPSS 0.049
CVE-2020-0869
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
Published 2020-03-12 · Modified
8.8EPSS 0.047
CVE-2020-1129
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.042
CVE-2019-1140
Chakra Scripting Engine Memory Corruption Vulnerability
Published 2019-08-14 · Modified
8.8EPSS 0.038
CVE-2020-1012
WinINet API Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.037
CVE-2020-1255
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.034
CVE-2020-1509
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
8.8EPSS 0.033
CVE-2020-1525
Media Foundation Memory Corruption Vulnerability
Published 2020-08-17 · Modified
8.8EPSS 0.029
CVE-2020-1593
Windows Media Audio Decoder Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.028
CVE-2020-16933
Microsoft Word Security Feature Bypass Vulnerability
Published 2020-10-16 · Modified
8.8EPSS 0.027
CVE-2019-1170
Windows NTFS Elevation of Privilege Vulnerability
Published 2019-08-14 · Modified
8.81 PoCEPSS 0.024
CVE-2020-17162
Microsoft Windows Security Feature Bypass Vulnerability
Published 2021-02-25 · Modified
8.8EPSS 0.024
CVE-2020-1506
Windows Start-Up Application Elevation of Privilege Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.021
CVE-2020-0792
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0745.
Published 2020-02-11 · Modified
8.8EPSS 0.013
CVE-2020-0981
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.The update addresses the vulnerability by correcting how Windows handles token relationships, aka 'Windows Token Security Feature Bypass Vulnerability'.
Published 2020-04-15 · Modified
8.8EPSS 0.013
CVE-2019-1053
Windows Shell Elevation of Privilege Vulnerability
Published 2019-06-12 · Modified
8.8EPSS 0.013
CVE-2020-16891
Windows Hyper-V Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
8.8EPSS 0.009
← Prev5 / 31Next →