Windows 10 1803 Security Vulnerabilities and Issues — Windows 10 1803 CVE List

Lucene search

MicrosoftWindows 10 1803

92 matches found

CVE•added 2020/01/14 11:15 p.m.•1294 views

CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, l...

8.1CVSS7.6AI score0.94044EPSS

CVE•added 2020/04/15 3:15 p.m.•1204 views

CVE-2020-1020

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could e...

8.8CVSS8.2AI score0.8787EPSS

CVE•added 2018/05/09 7:29 p.m.•283 views

CVE-2018-0824

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2...

8.8CVSS7.9AI score0.8545EPSS

CVE•added 2018/12/12 12:29 a.m.•253 views

CVE-2018-8639

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.4CVSS8.5AI score0.20396EPSS

CVE•added 2021/01/12 8:15 p.m.•233 views

CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

8.8CVSS8AI score0.53619EPSS

CVE•added 2020/06/09 8:15 p.m.•221 views

CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.34234EPSS

CVE•added 2020/06/09 8:15 p.m.•220 views

CVE-2020-1300

A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have to convince a user to either open a specially crafted cabinet file or spoof a network printer and trick a user into installing a malicious ...

8.8CVSS8.3AI score0.40477EPSS

CVE•added 2020/10/16 11:15 p.m.•204 views

CVE-2020-16891

<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could c...

8.8CVSS8.7AI score0.00539EPSS

CVE•added 2020/10/16 11:15 p.m.•183 views

CVE-2020-16898

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p><p>To exploit this vulnerability,...

8.8CVSS8.7AI score0.30684EPSS

CVE•added 2021/05/11 7:15 p.m.•182 views

CVE-2021-28455

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.09683EPSS

CVE•added 2020/06/09 8:15 p.m.•159 views

CVE-2020-1281

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

8.8CVSS8.5AI score0.27332EPSS

CVE•added 2019/06/12 2:29 p.m.•156 views

CVE-2019-1019

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access anothe...

8.5CVSS7.1AI score0.04674EPSS

CVE•added 2021/01/12 8:15 p.m.•154 views

CVE-2021-1658

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/05/11 7:15 p.m.•149 views

CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

8.8CVSS9.3AI score0.06956EPSS

CVE•added 2020/08/17 7:15 p.m.•147 views

CVE-2020-1509

An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause an elevation of privilege on the targ...

8.8CVSS8.1AI score0.06869EPSS

CVE•added 2018/09/13 12:29 a.m.•139 views

CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server ...

8.8CVSS8.3AI score0.16322EPSS

CVE•added 2019/01/08 9:29 p.m.•139 views

CVE-2019-0552

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

8.8CVSS7.6AI score0.00868EPSS

CVE•added 2019/06/12 2:29 p.m.•136 views

CVE-2019-0620

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could caus...

8.4CVSS8.1AI score0.00508EPSS

CVE•added 2021/04/13 8:15 p.m.•135 views

CVE-2021-28353

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2020/12/10 12:15 a.m.•134 views

CVE-2020-17140

Windows SMB Information Disclosure Vulnerability

8.1CVSS6.8AI score0.19706EPSS

CVE•added 2019/06/12 2:29 p.m.•132 views

CVE-2019-1053

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox.To exploit this vulnerability, an attacker would require unprivileged execution on the vi...

8.8CVSS7.2AI score0.00362EPSS

CVE•added 2021/04/13 8:15 p.m.•131 views

CVE-2021-28434

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2020/02/11 10:15 p.m.•130 views

CVE-2020-0729

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.

8.8CVSS8.2AI score0.30068EPSS

CVE•added 2021/01/12 8:15 p.m.•129 views

CVE-2021-1669

Windows Remote Desktop Security Feature Bypass Vulnerability

8.8CVSS8.6AI score0.0264EPSS

CVE•added 2021/01/12 8:15 p.m.•127 views

CVE-2021-1666

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1525

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

8.8CVSS8.2AI score0.08623EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2018/09/13 12:29 a.m.•125 views

CVE-2018-0965

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. Th...

8.4CVSS7.9AI score0.00751EPSS

CVE•added 2020/06/09 8:15 p.m.•125 views

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

8.8CVSS8.3AI score0.27581EPSS

CVE•added 2021/01/12 8:15 p.m.•125 views

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.00889EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•124 views

CVE-2021-28355

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•123 views

CVE-2021-28332

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•123 views

CVE-2021-28334

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•123 views

CVE-2021-28342

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2019/11/12 7:15 p.m.•122 views

CVE-2019-1419

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1456.

8.8CVSS9.3AI score0.23721EPSS

CVE•added 2021/04/13 8:15 p.m.•122 views

CVE-2021-28338

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•122 views

CVE-2021-28344

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•121 views

CVE-2021-28327

Remote Procedure Call Runtime Remote Code Execution Vulnerability