High
CVE-2020-17095
Windows Hyper-V Remote Code Execution Vulnerability
Tag: Microsoft Windows
All CVEs associated with "Microsoft Windows". Page 51/121 • 14518 CVEs.
Subscribe CVEs: RSS for “Microsoft Windows” · RSS (High+Critical only)
About “Microsoft Windows”
A curated feed of “Microsoft Windows”-related CVEs appears below. We currently track 14518 CVEs for this tag (all time). In the last 365 days, 1678 were published. Average CVSS is 7.3 (all time; 7.2 over 365d), and 66% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-416 - Use After Free, CWE-122 - Heap-based Buffer Overflow, CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition').
In our taxonomy this topic maps to a MODERATE impact class. Issues here typically affect operating system packages or kernels. Plan reboots or service restarts and coordinate rollouts across fleets. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2020-12-10
Medium
CVE-2020-17094
Windows Error Reporting Information Disclosure Vulnerability
High
CVE-2020-17092
Windows Network Connections Service Elevation of Privilege Vulnerability
High
CVE-2020-16964
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16963
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16962
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16961
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16960
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16959
Windows Backup Engine Elevation of Privilege Vulnerability
High
CVE-2020-16958
Windows Backup Engine Elevation of Privilege Vulnerability
2020-12-09
High
CVE-2020-10143
Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivilege…
High
CVE-2020-2049
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privil…
Medium
CVE-2020-2020
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents t…
Medium
CVE-2020-7337
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16 allows local administrators to bypass local security protection through…
Medium
CVE-2020-26966
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. *Note: Th…
2020-12-08
High
CVE-2020-9991
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to…
High
CVE-2020-27918
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS…
High
CVE-2020-27917
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12…
High
CVE-2020-27912
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.…
High
CVE-2020-27911
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.…
Low
CVE-2020-27895
An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious applica…
High
CVE-2020-9999
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to…
High
CVE-2020-9981
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, mac…
High
CVE-2020-9947
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Saf…
Medium
CVE-2020-9849
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud fo…
High
CVE-2020-26233
Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively clo…
Medium
CVE-2020-10002
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Wi…
2020-12-03
High
CVE-2020-6021
Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users…
2020-12-01
High
CVE-2020-7335
Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by cr…
Medium
CVE-2020-15257
containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed t…
2020-11-24
Medium
CVE-2020-26235
In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to…
2020-11-23
High
CVE-2020-24227
Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password.
Critical
CVE-2020-6939
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SA…
Medium
CVE-2020-0569
Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
2020-11-20
High
CVE-2020-4739
IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to exe…
2020-11-19
High
CVE-2020-28209
A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any…
High
CVE-2020-4701
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to exe…
2020-11-18
High
CVE-2020-27696
Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrativ…
2020-11-17
High
CVE-2020-27131
Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected devic…
2020-11-16
High
CVE-2020-8270
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 ho…
High
CVE-2020-8269
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344…
2020-11-12
Medium
CVE-2020-12328
Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.
Medium
CVE-2020-12327
Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local…
Medium
CVE-2020-12326
Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable information disclosure via local access.
High
CVE-2020-12325
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.
High
CVE-2020-12324
Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.
High
CVE-2020-13771
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (…
High
CVE-2020-12354
Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
High
CVE-2020-12304
Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.
High
CVE-2020-12297
Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may al…
Medium
CVE-2020-0575
Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticated user to potentially enable information disclosure via local access.
High
CVE-2019-11121
Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access.
2020-11-11
High
CVE-2020-5992
NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to bin…
Medium
CVE-2020-1599
Windows Spoofing Vulnerability
Medium
CVE-2020-17113
Windows Camera Codec Information Disclosure Vulnerability
High
CVE-2020-17088
Windows Common Log File System Driver Elevation of Privilege Vulnerability
High
CVE-2020-17087
Windows Kernel Local Elevation of Privilege Vulnerability
High
CVE-2020-17077
Windows Update Stack Elevation of Privilege Vulnerability
High
CVE-2020-17076
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
High
CVE-2020-17075
Windows USO Core Worker Elevation of Privilege Vulnerability
High
CVE-2020-17074
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
High
CVE-2020-17073
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Medium
CVE-2020-17071
Windows Delivery Optimization Information Disclosure Vulnerability
High
CVE-2020-17070
Windows Update Medic Service Elevation of Privilege Vulnerability
Medium
CVE-2020-17069
Windows NDIS Information Disclosure Vulnerability
High
CVE-2020-17068
Windows GDI+ Remote Code Execution Vulnerability
High
CVE-2020-17057
Windows Win32k Elevation of Privilege Vulnerability
Medium
CVE-2020-17056
Windows Network File System Information Disclosure Vulnerability
High
CVE-2020-17055
Windows Remote Access Elevation of Privilege Vulnerability
Critical
CVE-2020-17051
Windows Network File System Remote Code Execution Vulnerability
High
CVE-2020-17047
Windows Network File System Denial of Service Vulnerability
Medium
CVE-2020-17046
Windows Error Reporting Denial of Service Vulnerability
Medium
CVE-2020-17045
Windows KernelStream Information Disclosure Vulnerability
High
CVE-2020-17044
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17043
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17042
Windows Print Spooler Remote Code Execution Vulnerability
High
CVE-2020-17041
Windows Print Configuration Elevation of Privilege Vulnerability
Medium
CVE-2020-17040
Windows Hyper-V Security Feature Bypass Vulnerability
High
CVE-2020-17037
Windows WalletService Elevation of Privilege Vulnerability
Medium
CVE-2020-17036
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
High
CVE-2020-17035
Windows Kernel Elevation of Privilege Vulnerability
High
CVE-2020-17034
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17033
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17032
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17031
Windows Remote Access Elevation of Privilege Vulnerability
Medium
CVE-2020-17030
Windows MSCTF Server Information Disclosure Vulnerability
Medium
CVE-2020-17029
Windows Canonical Display Driver Information Disclosure Vulnerability
High
CVE-2020-17028
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17027
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17026
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17025
Windows Remote Access Elevation of Privilege Vulnerability
High
CVE-2020-17024
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability
High
CVE-2020-17014
Windows Print Spooler Elevation of Privilege Vulnerability
High
CVE-2020-17012
Windows Bind Filter Driver Elevation of Privilege Vulnerability
High
CVE-2020-17011
Windows Port Class Library Elevation of Privilege Vulnerability
High
CVE-2020-17007
Windows Error Reporting Elevation of Privilege Vulnerability
Medium
CVE-2020-17004
Windows Graphics Component Information Disclosure Vulnerability
High
CVE-2020-17001
Windows Print Spooler Elevation of Privilege Vulnerability
Medium
CVE-2020-16999
Windows WalletService Information Disclosure Vulnerability
2020-11-10
High
CVE-2020-24367
Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user.
2020-11-09
Medium
CVE-2020-8276
The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. T…
2020-11-06
High
CVE-2020-3604
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabil…
High
CVE-2020-3603
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabil…
High
CVE-2020-3588
A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occ…
High
CVE-2020-3573
Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabil…
Medium
CVE-2020-27123
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the unde…
High
CVE-2020-5794
A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a spe…
2020-11-05
Medium
CVE-2020-6015
Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations.
High
CVE-2020-5793
A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially c…
2020-11-04
Critical
CVE-2020-2301
Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a successful authentication of that user is still in the optional cache when using Wind…
Critical
CVE-2020-2300
Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows/ADSI mode, which allows attackers to log in to Jenkins as any user depending on the configur…
2020-11-03
Critical
CVE-2020-16011
Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted…
Medium
CVE-2020-15988
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted H…
2020-11-02
Medium
CVE-2020-6014
Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An at…
2020-10-28
High
CVE-2020-4767
IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted reques…
High
CVE-2020-8254
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To i…
High
CVE-2020-8240
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provid…
Critical
CVE-2020-8239
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker…
High
CVE-2020-5144
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.
2020-10-27
High
CVE-2020-3864
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and…