Windows 10 Servers (Microsoft) - vulnerabilities (CVEs)

201 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-01-08. Vendor: Microsoft.

CVEs of Windows 10 Servers

CVE-2019-0583 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0582 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0581 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0584 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0570 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege…
CVE-2019-0573 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service…
CVE-2019-0576 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0580 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0569 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0572 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service…
CVE-2019-0575 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0579 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0571 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service…
CVE-2019-0574 - CVSS 7.8 (high), 2019-01-08: An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service…
CVE-2019-0577 - CVSS 7.8 (high), 2019-01-08: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code…
CVE-2019-0549 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0552 - CVSS 8.8 (high), 2019-01-08: An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2,…
CVE-2019-0547 - CVSS 9.8 (critical), 2019-01-08: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP…
CVE-2019-0551 - CVSS 8.4 (high), 2019-01-08: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2019-0554 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0536 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2019-0550 - CVSS 8.4 (high), 2019-01-08: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2019-0553 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux…
CVE-2018-8634 - CVSS 8.8 (high), 2018-12-12: A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft…
CVE-2018-8641 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k…
CVE-2018-8626 - CVSS 9.8 (critical), 2018-12-12: A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server…
CVE-2018-8639 - CVSS 8.4 (high), 2018-12-12: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8637 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address…
CVE-2018-8611 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8514 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime…
CVE-2018-8599 - CVSS 7.8 (high), 2018-12-12: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka…
CVE-2018-8477 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8596 - CVSS 6.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8612 - CVSS 5.5 (medium), 2018-12-12: A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values, aka "Connected User…
CVE-2018-8595 - CVSS 6.5 (medium), 2018-12-12: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8584 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of…
CVE-2018-8561 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This…
CVE-2018-8566 - CVSS 4.6 (medium), 2018-11-14: A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass…
CVE-2018-8554 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This…
CVE-2018-8565 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure…
CVE-2018-8547 - CVSS 5.4 (medium), 2018-11-14: A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not…
CVE-2018-8562 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8454 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information…
CVE-2018-8544 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution…
CVE-2018-8408 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8450 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This…
CVE-2018-8485 - CVSS 7.8 (high), 2018-11-14: An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This…
CVE-2018-8407 - CVSS 5.5 (medium), 2018-11-14: An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC…
CVE-2018-8417 - CVSS 5.3 (medium), 2018-11-14: A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security…
CVE-2018-8476 - CVSS 9.8 (critical), 2018-11-14: A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment…
CVE-2018-8256 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution…
CVE-2018-8415 - CVSS 7.8 (high), 2018-11-14: A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This…
CVE-2018-8506 - CVSS 5.5 (medium), 2018-10-10: An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs…
CVE-2018-8494 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…
CVE-2018-8493 - CVSS 7.5 (high), 2018-10-10: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information…
CVE-2018-8497 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8495 - CVSS 7.5 (high), 2018-10-10: A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects…
CVE-2018-8484 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
CVE-2018-8490 - CVSS 8.4 (high), 2018-10-10: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2018-8482 - CVSS 3.1 (low), 2018-10-10: An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information…
CVE-2018-8489 - CVSS 8.4 (high), 2018-10-10: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2018-8481 - CVSS 3.1 (low), 2018-10-10: An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information…
CVE-2018-8486 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This…
CVE-2018-8492 - CVSS 5.3 (medium), 2018-10-10: A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka…
CVE-2018-8453 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of…
CVE-2018-8423 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability."…
CVE-2018-8472 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to…
CVE-2018-8329 - CVSS 7.8 (high), 2018-10-10: An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux On Windows…
CVE-2018-8411 - CVSS 7.8 (high), 2018-10-10: An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7,…
CVE-2018-8320 - CVSS 4.3 (medium), 2018-10-10: A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows…
CVE-2018-8333 - CVSS 7 (high), 2018-10-10: An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of…
CVE-2018-8330 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8413 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution…
CVE-2018-8475 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution…
CVE-2018-8468 - CVSS 4.7 (medium), 2018-09-13: An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects…
CVE-2018-8462 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics…
CVE-2018-8449 - CVSS 3.3 (low), 2018-09-13: A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This…
CVE-2018-8446 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8455 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege…
CVE-2018-8439 - CVSS 8.4 (high), 2018-09-13: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…
CVE-2018-8442 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8438 - CVSS 6.8 (medium), 2018-09-13: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a…
CVE-2018-8441 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux Elevation of…
CVE-2018-8445 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8437 - CVSS 6.2 (medium), 2018-09-13: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a…
CVE-2018-8440 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of…
CVE-2018-8443 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure…
CVE-2018-8433 - CVSS 4.7 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Graphics Component…
CVE-2018-8436 - CVSS 6.2 (medium), 2018-09-13: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a…
CVE-2018-8435 - CVSS 4.2 (medium), 2018-09-13: A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature…
CVE-2018-8434 - CVSS 5.4 (medium), 2018-09-13: An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on…
CVE-2018-8419 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information…
CVE-2018-8410 - CVSS 7.8 (high), 2018-09-13: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of…
CVE-2018-8424 - CVSS 6.5 (medium), 2018-09-13: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information…
CVE-2018-8420 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution…
CVE-2018-8337 - CVSS 5.3 (medium), 2018-09-13: A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security…
CVE-2018-8393 - CVSS 7.8 (high), 2018-09-13: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET…
CVE-2018-8392 - CVSS 7.8 (high), 2018-09-13: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET…
CVE-2018-8271 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka…
CVE-2018-0965 - CVSS 8.4 (high), 2018-09-13: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest…