CVE-2020-1387

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.

CVE-2020-1400

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.

CVE-2020-1404

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413, CVE-2020-1414, CVE-2020-141...

CVE-2020-1428

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1438.

CVE-2020-16905

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.An attacker who successfully exploited the vulnerability could gain greater access to ...

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

CVE-2020-17033

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17041

Windows Print Configuration Elevation of Privilege Vulnerability

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability

CVE-2021-1670

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2021-28319

Windows TCP/IP Driver Denial of Service Vulnerability

CVE-2021-28351

Windows Speech Runtime Elevation of Privilege Vulnerability

CVE-2021-43233

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2021-43240

NTFS Set Short Name Elevation of Privilege Vulnerability

CVE-2020-0904

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtua...

CVE-2020-0922

A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted file...

CVE-2020-1053

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with ful...

CVE-2020-1146

An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security...

CVE-2020-1159

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker cou...

CVE-2020-1314

An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.

CVE-2020-1411

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

CVE-2021-1687

Windows WalletService Elevation of Privilege Vulnerability

CVE-2021-1693

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2021-27090

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2021-28328

Windows DNS Information Disclosure Vulnerability

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability

CVE-2021-34509

Storage Spaces Controller Information Disclosure Vulnerability

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVE-2020-0912

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privil...

CVE-2020-1047

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.This vulnerability by itself does not allow arbit...

CVE-2020-1241

A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system.The update addresses the vulnerability by correct...

CVE-2020-1254

An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Modules Installer Service Elevation of Privilege Vulnerability'.

CVE-2020-1261

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1263.

CVE-2020-17027

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

CVE-2020-17094

Windows Error Reporting Information Disclosure Vulnerability

CVE-2021-1679

Windows CryptoAPI Denial of Service Vulnerability

CVE-2021-1685

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

CVE-2021-1686

Windows WalletService Elevation of Privilege Vulnerability

CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2021-26416

Windows Hyper-V Denial of Service Vulnerability

CVE-2021-26863

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-26881

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2021-26901

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-27079

Windows Media Photo Codec Information Disclosure Vulnerability

CVE-2021-28309

Windows Kernel Information Disclosure Vulnerability