Microsoft Windows - 14518 CVEs (Page 56/121)

About “Microsoft Windows”

A curated feed of “Microsoft Windows”-related CVEs appears below. We currently track 14518 CVEs for this tag (all time). In the last 365 days, 1678 were published. Average CVSS is 7.3 (all time; 7.2 over 365d), and 66% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-416 - Use After Free, CWE-122 - Heap-based Buffer Overflow, CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition').

In our taxonomy this topic maps to a MODERATE impact class. Issues here typically affect operating system packages or kernels. Plan reboots or service restarts and coordinate rollouts across fleets. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2020-06-09

High

CVE-2020-1274

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique fro…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1273

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1272

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authentic…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1271

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1270

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1269

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1268

An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information Disclosure Vulnerability'.

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1266

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1265

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1264

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1263

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'. This CVE ID is u…

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1262

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1261

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2020-1259

A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Service Security Feature Bypass Vulnerabili…

CVSS: 4.3 CWE: N/A View on NVD

High

CVE-2020-1255

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Tran…

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2020-1254

An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated s…

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1253

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE I…

CVSS: 6.7 CWE: N/A View on NVD

Medium

CVE-2020-1251

CVSS: 6.7 CWE: N/A View on NVD

High

CVE-2020-1248

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2020-1247

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1246

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1241

A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authenticated attacker could attempt to run a…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-202…

CVSS: 8.8 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2020-1238

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-1237

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1236

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1235

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1234

An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the v…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1233

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1231

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1217

An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1209

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1208

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1207

CVSS: 7.8 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2020-1206

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclos…

CVSS: 7.5 CWE: CWE-908 - Use of Uninitialized Resource View on NVD

High

CVE-2020-1204

An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Pri…

CVSS: 7.1 CWE: N/A View on NVD

High

CVE-2020-1201

An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerabil…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1199

An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1197

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1196

An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1194

A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1170

An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system,…

CVSS: 7.8 CWE: CWE-732 - Incorrect Permission Assignment for Critical Resource View on NVD

High

CVE-2020-1163

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1162

An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to…

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1160

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerabili…

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-0986

CVSS: 7.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-0916

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-0915

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-9858

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may r…

CVSS: 7.8 CWE: CWE-427 - Uncontrolled Search Path Element View on NVD

Critical

CVE-2020-9850

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2…

CVSS: 9.8 CWE: N/A View on NVD

High

CVE-2020-9843

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud…

CVSS: 7.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

High

CVE-2020-9807

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud…

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-9806

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-9805

CVSS: 7.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

High

CVE-2020-9803

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Wi…

CVSS: 8.8 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2020-9802

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2020-9800

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for…

CVSS: 8.8 CWE: CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion') View on NVD

High

CVE-2020-9794

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCl…

CVSS: 8.1 CWE: CWE-125 - Out-of-bounds Read View on NVD

High

CVE-2020-9790

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windo…

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-9789

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

2020-06-08

High

CVE-2020-13885

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application.

CVSS: 7.8 CWE: CWE-276 - Incorrect Default Permissions View on NVD

High

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.

CVSS: 7.8 CWE: CWE-276 - Incorrect Default Permissions View on NVD

2020-06-05

High

CVE-2020-11492

An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a conne…

CVSS: 7.8 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2020-06-04

Critical

CVE-2020-9292

An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path.

CVSS: 9.8 CWE: CWE-428 - Unquoted Search Path or Element View on NVD

Medium

CVE-2019-16150

Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local st…

CVSS: 5.5 CWE: CWE-798 - Use of Hard-coded Credentials View on NVD

2020-06-03

Low

CVE-2020-3322

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service (DoS) condition…

CVSS: 3.3 CWE: CWE-20 - Improper Input Validation View on NVD

Low

CVE-2020-3321

CVSS: 3.3 CWE: CWE-20 - Improper Input Validation View on NVD

Low

CVE-2020-3319

CVSS: 3.3 CWE: CWE-20 - Improper Input Validation View on NVD

2020-06-01

Medium

CVE-2020-9291

An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a…

CVSS: 6.3 CWE: CWE-668 - Exposure of Resource to Wrong Sphere View on NVD

2020-05-29

High

CVE-2020-13634

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b…

CVSS: 7.8 CWE: CWE-20 - Improper Input Validation View on NVD

2020-05-28

High

CVE-2020-13173

Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which al…

CVSS: 7.8 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2020-05-26

Critical

CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerab…

CVSS: 10.0 CWE: CWE-20 - Improper Input Validation View on NVD

Critical

CVE-2020-12388

CVSS: 10.0 CWE: CWE-20 - Improper Input Validation View on NVD

High

CVE-2020-12393

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted…

CVSS: 7.8 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

2020-05-25

Critical

CVE-2020-5537

Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.

CVSS: 9.8 CWE: CWE-20 - Improper Input Validation View on NVD

2020-05-22

Critical

CVE-2020-13417

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain O…

CVSS: 9.8 CWE: N/A View on NVD

2020-05-21

High

CVE-2020-1191

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerabili…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1190

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1189

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1188

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1187

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1186

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1185

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1184

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1179

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is u…

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2020-1176

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1175

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1174

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1166

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1165

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1164

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1158

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1157

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1156

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1155

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1154

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Priv…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1151

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1150

CVSS: 7.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-1149

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1145

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted syst…

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1144

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1143

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1142

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2020-1141

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1139

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1138

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1137

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1136

CVSS: 7.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-1135

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1134

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1132

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1131

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1126

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2020-1125

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1124

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1121

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1118

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Secur…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2020-1116

An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerab…

CVSS: 5.5 CWE: N/A View on NVD

High

CVE-2020-1114

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2020-1113

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature…

CVSS: 7.5 CWE: CWE-295 - Improper Certificate Validation View on NVD