Filtered by vendor Microsoft
Subscriptions
Filtered by product Windows Server 1903
Subscriptions
Total
321 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2020-1013 | 1 Microsoft | 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more | 2024-11-21 | 7.5 High |
<p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.</p> <p>To exploit this vulnerability, an attacker would need to launch a man-in-the-middle (MiTM) attack against the traffic passing between a domain controller and the target machine. An attacker could then create a group policy to grant administrator rights to a standard user.</p> <p>The security update addresses the vulnerability by enforcing Kerberos authentication for certain calls over LDAP.</p> | ||||
CVE-2020-17162 | 1 Microsoft | 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more | 2024-11-21 | 8.8 High |
Microsoft Windows Security Feature Bypass Vulnerability | ||||
CVE-2020-17090 | 1 Microsoft | 11 Windows 10, Windows 10 1803, Windows 10 1809 and 8 more | 2024-11-21 | 5.3 Medium |
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability | ||||
CVE-2020-17088 | 1 Microsoft | 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more | 2024-11-21 | 7.8 High |
Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||||
CVE-2020-17077 | 1 Microsoft | 11 Windows 10, Windows 10 1803, Windows 10 1809 and 8 more | 2024-11-21 | 7.8 High |
Windows Update Stack Elevation of Privilege Vulnerability | ||||
CVE-2020-17076 | 1 Microsoft | 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more | 2024-11-21 | 7.8 High |
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | ||||
CVE-2020-17075 | 1 Microsoft | 13 Windows 10, Windows 10 1507, Windows 10 1607 and 10 more | 2024-11-21 | 7.8 High |
Windows USO Core Worker Elevation of Privilege Vulnerability | ||||
CVE-2020-17074 | 1 Microsoft | 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more | 2024-11-21 | 7.8 High |
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | ||||
CVE-2020-17073 | 1 Microsoft | 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more | 2024-11-21 | 7.8 High |
Windows Update Orchestrator Service Elevation of Privilege Vulnerability | ||||
CVE-2020-17071 | 1 Microsoft | 13 Windows 10, Windows 10 1507, Windows 10 1607 and 10 more | 2024-11-21 | 5.5 Medium |
Windows Delivery Optimization Information Disclosure Vulnerability | ||||
CVE-2020-17070 | 1 Microsoft | 11 Windows 10, Windows 10 1803, Windows 10 1809 and 8 more | 2024-11-21 | 7.8 High |
Windows Update Medic Service Elevation of Privilege Vulnerability | ||||
CVE-2020-17069 | 1 Microsoft | 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more | 2024-11-21 | 5.5 Medium |
Windows NDIS Information Disclosure Vulnerability | ||||
CVE-2020-17068 | 1 Microsoft | 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more | 2024-11-21 | 7.8 High |
Windows GDI+ Remote Code Execution Vulnerability | ||||
CVE-2020-17057 | 1 Microsoft | 12 Windows 10, Windows 10 1607, Windows 10 1803 and 9 more | 2024-11-21 | 7 High |
Windows Win32k Elevation of Privilege Vulnerability | ||||
CVE-2020-17056 | 1 Microsoft | 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more | 2024-11-21 | 5.5 Medium |
Windows Network File System Information Disclosure Vulnerability | ||||
CVE-2020-17055 | 1 Microsoft | 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more | 2024-11-21 | 7.8 High |
Windows Remote Access Elevation of Privilege Vulnerability | ||||
CVE-2020-17051 | 1 Microsoft | 11 Windows Server 1903, Windows Server 1909, Windows Server 2004 and 8 more | 2024-11-21 | 9.8 Critical |
Windows Network File System Remote Code Execution Vulnerability | ||||
CVE-2020-17049 | 3 Microsoft, Redhat, Samba | 13 Windows Server 1903, Windows Server 1909, Windows Server 2004 and 10 more | 2024-11-21 | 6.6 Medium |
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD. | ||||
CVE-2020-17047 | 1 Microsoft | 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more | 2024-11-21 | 7.5 High |
Windows Network File System Denial of Service Vulnerability | ||||
CVE-2020-17046 | 1 Microsoft | 13 Windows 10, Windows 10 1507, Windows 10 1607 and 10 more | 2024-11-21 | 5.5 Medium |
Windows Error Reporting Denial of Service Vulnerability |