Windows 10 1703 Security Vulnerabilities and Issues — Windows 10 1703 CVE List

Lucene search

MicrosoftWindows 10 1703

112 matches found

CVE•added 2019/09/03 6:15 p.m.•590 views

CVE-2019-1125

An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.To exploit this vulnerability, an attacker would have to log on to an a...

5.6CVSS6.8AI score0.15102EPSS

CVE•added 2019/06/12 2:29 p.m.•251 views

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features.To exploit t...

5.9CVSS6.7AI score0.9061EPSS

CVE•added 2019/07/15 7:15 p.m.•241 views

CVE-2019-1073

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.

5.5CVSS5.8AI score0.00349EPSS

CVE•added 2019/04/09 9:29 p.m.•238 views

CVE-2019-0796

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

5.5CVSS6.7AI score0.85917EPSS

CVE•added 2019/07/15 7:15 p.m.•176 views

CVE-2019-1096

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS5.6AI score0.23126EPSS

CVE•added 2019/07/15 7:15 p.m.•172 views

CVE-2019-1091

An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.

5.5CVSS5.8AI score0.00933EPSS

CVE•added 2018/11/14 1:29 a.m.•166 views

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wi...

5.5CVSS6.7AI score0.00704EPSS

CVE•added 2019/07/15 7:15 p.m.•160 views

CVE-2019-1071

5.5CVSS5.8AI score0.00349EPSS

CVE•added 2019/09/11 10:15 p.m.•150 views

CVE-2019-1289

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions, aka 'Windows Update Delivery Optimization Elevation of Privilege Vulnerability'.

5.5CVSS6.7AI score0.00212EPSS

CVE•added 2019/03/06 12:0 a.m.•146 views

CVE-2019-0621

5.5CVSS6.5AI score0.01706EPSS

CVE•added 2019/01/08 9:29 p.m.•140 views

CVE-2019-0569

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/04/09 9:29 p.m.•139 views

CVE-2019-0844

5.5CVSS6.1AI score0.00978EPSS

CVE•added 2019/04/09 12:29 a.m.•138 views

CVE-2019-0755

5.5CVSS5.6AI score0.00908EPSS

CVE•added 2019/09/11 10:15 p.m.•137 views

CVE-2019-1282

An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00573EPSS

CVE•added 2019/04/09 9:29 p.m.•136 views

CVE-2019-0848

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0814.

5.5CVSS6AI score0.00996EPSS

CVE•added 2019/03/06 12:0 a.m.•132 views

CVE-2019-0628

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6.4AI score0.00549EPSS

CVE•added 2019/09/11 10:15 p.m.•132 views

CVE-2019-1274

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.

5.5CVSS5.9AI score0.0059EPSS

CVE•added 2019/03/06 12:0 a.m.•131 views

CVE-2019-0636

An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.

5.5CVSS6.8AI score0.00549EPSS

CVE•added 2018/11/14 1:29 a.m.•130 views

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

5.5CVSS6.4AI score0.0263EPSS

CVE•added 2018/09/13 12:29 a.m.•129 views

CVE-2018-8442

5.5CVSS5.7AI score0.04881EPSS

CVE•added 2019/01/08 9:29 p.m.•128 views

CVE-2019-0536

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/04/09 9:29 p.m.•128 views

CVE-2019-0814

5.5CVSS6AI score0.00996EPSS

CVE•added 2019/04/09 2:29 a.m.•127 views

CVE-2019-0767

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from C...

5.5CVSS5.5AI score0.00908EPSS

CVE•added 2019/04/09 3:29 a.m.•127 views

CVE-2019-0782

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0775.

5.5CVSS5.5AI score0.00908EPSS

CVE•added 2019/06/12 2:29 p.m.•127 views

CVE-2019-0948

An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declarati...

5.5CVSS6AI score0.42662EPSS

CVE•added 2019/04/09 2:29 a.m.•126 views

CVE-2019-0759

An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00401EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0549

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0554

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2018/09/13 12:29 a.m.•124 views

CVE-2018-8271

An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka "Windows Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Serve...

5.5CVSS5.7AI score0.04235EPSS

CVE•added 2019/04/09 12:29 a.m.•124 views

CVE-2019-0702

5.5CVSS5.6AI score0.00908EPSS

CVE•added 2018/11/14 1:29 a.m.•123 views

CVE-2018-8408

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows ...

5.5CVSS6.5AI score0.00704EPSS

CVE•added 2019/03/06 12:0 a.m.•123 views

CVE-2019-0663

5.5CVSS6.3AI score0.01706EPSS

CVE•added 2018/04/12 1:29 a.m.•122 views

CVE-2018-0976

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka "Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windo...

5.3CVSS6.3AI score0.09956EPSS

CVE•added 2018/12/12 12:29 a.m.•121 views

CVE-2018-8514

An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2...

5.5CVSS6.6AI score0.01238EPSS

CVE•added 2018/11/14 1:29 a.m.•120 views

CVE-2018-8417

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

5.3CVSS5.3AI score0.00245EPSS

CVE•added 2019/04/09 9:29 p.m.•117 views

CVE-2019-0837

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00978EPSS

CVE•added 2019/08/14 9:15 p.m.•117 views

CVE-2019-1148

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker wou...

5.5CVSS6.7AI score0.03723EPSS

CVE•added 2018/12/12 12:29 a.m.•116 views

CVE-2018-8477

5.5CVSS6.5AI score0.01202EPSS

CVE•added 2018/04/12 1:29 a.m.•114 views

CVE-2018-0957

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Se...

5.3CVSS5.9AI score0.00534EPSS

CVE•added 2018/04/12 1:29 a.m.•114 views

CVE-2018-0971

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2...

5.5CVSS5AI score0.02612EPSS

CVE•added 2019/04/09 12:29 a.m.•114 views

CVE-2019-0754

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

5.5CVSS6.4AI score0.00471EPSS

CVE•added 2018/04/12 1:29 a.m.•113 views

CVE-2018-0974

5.5CVSS5AI score0.02612EPSS

CVE•added 2018/06/14 12:29 p.m.•113 views

CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windo...

5.5CVSS6.4AI score0.00652EPSS

CVE•added 2018/07/11 12:29 a.m.•113 views

CVE-2018-8309

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 ...

5.5CVSS6.4AI score0.00453EPSS

CVE•added 2019/08/14 9:15 p.m.•113 views

CVE-2019-0714

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.To exploit the vulnerabi...

5.8CVSS6.9AI score0.01294EPSS

CVE•added 2018/10/10 1:29 p.m.•112 views

CVE-2018-8330

5.5CVSS5.6AI score0.03602EPSS

CVE•added 2019/04/09 3:29 a.m.•112 views

CVE-2019-0776

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6AI score0.00881EPSS

CVE•added 2019/06/12 2:29 p.m.•112 views

CVE-2019-1039

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to f...

5.5CVSS6.1AI score0.00538EPSS

CVE•added 2018/05/09 7:29 p.m.•111 views

CVE-2018-0958

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-8129, CVE-2018-81...

5.3CVSS6.4AI score0.00558EPSS

CVE•added 2018/06/14 12:29 p.m.•111 views

CVE-2018-1040

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Wi...

5.4CVSS6.4AI score0.11561EPSS

Total number of security vulnerabilities112