VendorsMicrosoftwindows_server_20161903
Vulnerabilities

Microsoft Windows Server 1903

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1018CVEs
CVE-2020-0890
Windows Hyper-V Denial of Service Vulnerability
Published 2020-09-11 · Modified
6.5EPSS 0.028
CVE-2020-16996
Kerberos Security Feature Bypass Vulnerability
Published 2020-12-09 · Modified
6.5EPSS 0.024
CVE-2020-0904
Windows Hyper-V Denial of Service Vulnerability
Published 2020-09-11 · Modified
6.5EPSS 0.012
CVE-2020-15707
GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.
Published 2020-07-29 · Modified
6.4EPSS 0.016
CVE-2020-15705
GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
Published 2020-07-29 · Modified
6.4EPSS 0.014
CVE-2020-15706
GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.
Published 2020-07-29 · Modified
6.4EPSS 0.010
CVE-2020-16910
Windows Security Feature Bypass Vulnerability
Published 2020-10-16 · Modified
6.2EPSS 0.028
CVE-2019-1399
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0712, CVE-2019-1309, CVE-2019-1310.
Published 2019-11-12 · Modified
6.2EPSS 0.017
CVE-2020-1055
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.
Published 2020-05-21 · Modified
6.1EPSS 0.024
CVE-2019-1470
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
Published 2019-12-10 · Modified
6.0EPSS 0.068
CVE-2020-0751
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0661.
Published 2020-02-11 · Modified
6.0EPSS 0.014
CVE-2019-1166
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.
Published 2019-10-10 · Modified
5.9EPSS 0.681
CVE-2019-1040
Windows NTLM Tampering Vulnerability
Published 2019-06-12 · Modified
5.9EPSS 0.480
CVE-2019-1318
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
Published 2019-10-10 · Modified
5.9EPSS 0.035
CVE-2019-0717
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.051
CVE-2019-0718
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0714
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0715
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-0723
Windows Hyper-V Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.8EPSS 0.050
CVE-2019-1125
Windows Kernel Information Disclosure Vulnerability
Published 2019-09-03 · Modified
5.61 PoCEPSS 0.045
CVE-2019-1171
SymCrypt Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.6EPSS 0.014
CVE-2020-1599
Windows Spoofing Vulnerability
Published 2020-11-11 · Modified
5.5EPSS 0.191
CVE-2019-0948
Windows Event Viewer Information Disclosure Vulnerability
Published 2019-06-12 · Modified
5.51 PoCEPSS 0.127
CVE-2020-0939
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.087
CVE-2019-1374
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
5.5EPSS 0.071
CVE-2020-0937
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0945
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0946
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0947
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0946.
Published 2020-04-15 · Modified
5.5EPSS 0.066
CVE-2020-0607
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
Published 2020-01-14 · Modified
5.5EPSS 0.059
CVE-2020-0746
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
Published 2020-02-11 · Modified
5.5EPSS 0.051
CVE-2019-1096
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Published 2019-07-15 · Modified
5.5EPSS 0.048
CVE-2020-0875
Microsoft splwow64 Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.5EPSS 0.044
CVE-2019-1046
Windows GDI Information Disclosure Vulnerability
Published 2019-06-12 · Modified
5.5EPSS 0.043
CVE-2020-0728
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
Published 2020-02-11 · Modified
5.5EPSS 0.037
CVE-2020-16937
.NET Framework Information Disclosure Vulnerability
Published 2020-10-16 · Modified
5.5EPSS 0.033
CVE-2019-1187
XmlLite Runtime Denial of Service Vulnerability
Published 2019-08-14 · Modified
5.5EPSS 0.031
CVE-2019-1344
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
Published 2019-10-10 · Modified
5.51 PoCEPSS 0.031
CVE-2019-1345
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.
Published 2019-10-10 · Modified
5.51 PoCEPSS 0.030
CVE-2019-1153
Microsoft Graphics Component Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.51 PoCEPSS 0.028
← Prev22 / 26Next →