Windows Server 1909 Security Vulnerabilities - CVSS Score 5 - 6
<p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.</p><p>To exploit this ...
5CVSS
6.6AI Score
0.001EPSS
<p>An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system (low-integrity to medium-integrity).</p><p>This vulnerability by itself does not al...
5.5CVSS
7.3AI Score
0.007EPSS
<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p><p>An attacker could exploit this vulnerab...
5.5CVSS
6.2AI Score
0.001EPSS
5.5CVSS
6.5AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an attacker would have to ...
5.5CVSS
4.9AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit the vulnerability, an attacker would have t...
5.5CVSS
6.3AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could bypass access restrictions to read files.</p><p>To exploit this vulnerability, an attacker would fi...
5.5CVSS
6.3AI Score
0.0004EPSS
<p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.</p><p>To exploit this vulnerability, an attacker would have to log on to an affec...
5.5CVSS
6.7AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an at...
5.5CVSS
6.2AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an attacker would have to lo...
5.5CVSS
6.2AI Score
0.0004EPSS
<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p><p>An attacker could exploit this vulnerability by running a specia...
5.5CVSS
6.6AI Score
0.0004EPSS
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p><p>An attacker could exploit this vulnerability by running a spe...
5.5CVSS
6.5AI Score
0.0004EPSS
<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p><p>To exploit the vulnerability, an attacker would have to log on to an affected sy...
5.8CVSS
6.7AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an attacker would have ...
5.5CVSS
6.1AI Score
0.0004EPSS
<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.</p><p>An attacker could exploit this vulnerability by running a specially craft...
5.5CVSS
7AI Score
0.001EPSS
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...
5.5CVSS
6.8AI Score
0.001EPSS
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s systemTo exploit this vulnerability, an attacker would need to run a special...
5.5CVSS
5.6AI Score
0.0004EPSS
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new ...
5.5CVSS
6.5AI Score
0.0004EPSS
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a d...
An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an aut...
5.5CVSS
5.5AI Score
0.0004EPSS
<p>A information disclosure vulnerability exists when TLS components use weak hash algorithms. An attacker who successfully exploited this vulnerability could obtain information to further compromise a users's encrypted transmission channel.</p><p>To exploit the vulnerability, an attacker would hav...
5.4CVSS
6.1AI Score
0.001EPSS
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an attacker would have to ...
5.5CVSS
5.6AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system</p><p>To exploit this vulnerability, an attacker wou...
5.5CVSS
6.3AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an attacker would ha...
5.5CVSS
6.5AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p><p>To exploit this vulnerability, an a...
5.5CVSS
6.5AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p><p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain inform...
5CVSS
4.9AI Score
0.001EPSS
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however,...
5.5CVSS
6.7AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files.</p><p>An attacker with unprivileged access to a vulnerable system co...
5.5CVSS
6.3AI Score
0.0004EPSS
<p>An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow ...
5.5CVSS
6.5AI Score
0.002EPSS
<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.</p><p>In an attack scenario, an attacker could bypass security features intended to preve...
5.3CVSS
6.5AI Score
0.001EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
7AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.5CVSS
6.8AI Score
0.0004EPSS
5.3CVSS
6.9AI Score
0.003EPSS
5.5CVSS
6.2AI Score
0.0004EPSS
5.5CVSS
6.1AI Score
0.0004EPSS
5.5CVSS
6.4AI Score
0.0004EPSS
5CVSS
6.2AI Score
0.004EPSS
5.5CVSS
6.4AI Score
0.0004EPSS
5.5CVSS
6.4AI Score
0.0004EPSS
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
5.5CVSS
6.4AI Score
0.0004EPSS
5CVSS
6.4AI Score
0.001EPSS