CVE-2020-16914

CVE-2020-16914 is an information-disclosure in Windows GDI+ caused by how GDI+ handles memory addresses. Exploitation requires a logged-on attacker with a crafted app; remediation is a Microsoft security update addressing memory handling in GDI+.

Microsoft Windows Multiple Vulnerabilities (KB4580327)

This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB4580358: Windows 8.1 and Windows Server 2012 R2 October 2020 Security Update

The remote Windows host is missing security update 4580358 or cumulative update 4580347. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability...

KB4577668: Windows 10 Version 1809 and Windows Server 2019 October 2020 Security Update

The remote Windows host is missing security update 4577668. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...