Windows 10 1903 (Microsoft) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 128 known versions, newest CVE from 2020-11-11. Vendor: Microsoft.

CVEs of Windows 10 1903

• CVE-2020-17087 - CVSS 7.8 (high), 2020-11-11: Windows Kernel Local Elevation of Privilege Vulnerability
• CVE-2020-1464 - CVSS 7.8 (high), 2020-08-17: A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass…
• CVE-2020-0986 - CVSS 7.8 (high), 2020-06-09: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege…
• CVE-2020-1054 - CVSS 7.8 (high), 2020-05-21: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who…
• CVE-2020-1027 - CVSS 7.8 (high), 2020-04-15: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege…
• CVE-2020-1020 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted…
• CVE-2020-0938 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted…
• CVE-2020-0796 - CVSS 10 (critical), 2020-03-12: A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows…
• CVE-2020-0787 - CVSS 7.8 (high), 2020-03-12: An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows…
• CVE-2020-0683 - CVSS 7.8 (high), 2020-02-11: An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of…
• CVE-2020-0638 - CVSS 7.8 (high), 2020-01-14: An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first…
• CVE-2020-0601 - CVSS 8.1 (high), 2020-01-14: A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit…
• CVE-2019-1405 - CVSS 7.8 (high), 2019-11-12: An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows…
• CVE-2019-1388 - CVSS 7.8 (high), 2019-11-12: An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate…
• CVE-2019-1385 - CVSS 7.8 (high), 2019-11-12: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to…
• CVE-2019-1322 - CVSS 7.8 (high), 2019-10-10: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…
• CVE-2019-1315 - CVSS 7.8 (high), 2019-10-10: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager…
• CVE-2019-1253 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker…
• CVE-2019-1215 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege…
• CVE-2019-1214 - CVSS 7.8 (high), 2019-09-11: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common…
• CVE-2019-1130 - CVSS 7.8 (high), 2019-07-15: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
• CVE-2019-1129 - CVSS 7.8 (high), 2019-07-15: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
• CVE-2019-0880 - CVSS 7.8 (high), 2019-07-15: A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
• CVE-2019-1069 - CVSS 7.8 (high), 2019-06-12: An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited…
• CVE-2019-1064 - CVSS 7.8 (high), 2019-06-12: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully…
• CVE-2019-0903 - CVSS 8.8 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…
• CVE-2019-0863 - CVSS 7.8 (high), 2019-05-16: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege…