Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2020-02-11 CVE-2020-0691 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0688 Improper Authentication vulnerability in Microsoft Exchange Server
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
network
low complexity
microsoft CWE-287
8.8
2020-02-11 CVE-2020-0686 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-269
7.8
2020-02-11 CVE-2020-0685 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0683 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0682 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0681 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
network
high complexity
microsoft
7.5
2020-02-11 CVE-2020-0680 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0679 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-02-11 CVE-2020-0678 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8