CVE-2021-1694

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2021-1695

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-1696

Windows Graphics Component Information Disclosure Vulnerability

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability

CVE-2021-28349

Windows GDI+ Remote Code Execution Vulnerability

CVE-2019-1158

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.There are multiple ways an attacker could exploit th...

CVE-2020-1091

<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.</p><p>There are multiple ways an attacker could ...

CVE-2020-1547

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

CVE-2019-1177

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability, a locally authenticated attacker could run a specially crafted ...

CVE-2020-16935

<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p><p>To exploit this vulnerability, an attacker would first have to log on to the syste...

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2021-24103

Windows Event Tracing Elevation of Privilege Vulnerability

CVE-2021-28323

Windows DNS Information Disclosure Vulnerability

CVE-2020-17025

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

CVE-2021-1702

Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability

CVE-2019-1172

An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user's account.To exploit the vulnerability, an attacker would have to trick a user int...

CVE-2020-0911

<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context.</p><p>An attacker could exploit this vulnerability by running a specially...

CVE-2020-1115

<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File System (CLFS)</a> driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes...

CVE-2020-17011

Windows Port Class Library Elevation of Privilege Vulnerability

CVE-2020-17047

Windows Network File System Denial of Service Vulnerability

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

CVE-2021-1659

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2021-27094

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability

CVE-2019-1187

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.A remote unauthenticated attacker could exploit this vulnerability by iss...

CVE-2020-0782

<p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog.</p><p>To exploit this vulnerability, an attacker would first have ...

CVE-2020-17032

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2021-1661

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-1683

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...

CVE-2021-1710

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability

CVE-2020-0838

<p>An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p><p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specia...

CVE-2020-1598

<p>An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...

CVE-2020-17034

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2021-1652

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2021-1688

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability

CVE-2021-28439

Windows TCP/IP Driver Denial of Service Vulnerability

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

CVE-2020-17033

Windows Remote Access Elevation of Privilege Vulnerability

CVE-2020-17041

Windows Print Configuration Elevation of Privilege Vulnerability

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability

CVE-2020-0922

<p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.</p><p>To exploit the vulnerability, a user would have to open a specially cr...

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

CVE-2021-1693

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2021-28328

Windows DNS Information Disclosure Vulnerability