Microsoft Windows Server vulnerabilities

CVEs per yearBy the year they were published

1. 2020420
2. 2020335

Known exploitedNewest addition to KEV first

• CVE-2019-1388

  An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2020-1027

  An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2020-0638

  An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1385

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1130

  An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…

  Microsoft · Windows Server

  ExploitedHigh7.8
• CVE-2019-0880

  A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.

  Microsoft · Windows Server

  ExploitedHigh7.8
• CVE-2019-0703

  An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure…

  Microsoft · Windows

  ExploitedMedium6.5
• CVE-2019-0903

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…

  Microsoft · Windows

  ExploitedHigh8.8
• CVE-2019-1405

  An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

  Microsoft · Windows

  ExploitedHigh7.8
• CVE-2019-1322

  An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege…

  Microsoft · Windows

  ExploitedHigh7.8

Newest CVEs

• CVE-2020-1468

  An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  Medium6.5
• CVE-2020-1463

  An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation…

  Microsoft · Windows

  High7.8
• CVE-2020-1438

  An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1437

  An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1436

  A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High8.8
• CVE-2020-1435

  A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High8.8
• CVE-2020-1434

  An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service…

  Microsoft · Windows 10 Version 2004 for ARM64-based Systems

  Medium5.3
• CVE-2020-1431

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1430

  An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8
• CVE-2020-1429

  An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager…

  Microsoft · Windows 10 Version 2004 for 32-bit Systems

  High7.8