Vulnerabilities > Microsoft > Windows 10 > 1803

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-1223 Unspecified vulnerability in Microsoft products
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
7.5
2019-08-14 CVE-2019-1222 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
critical
9.8
2019-08-14 CVE-2019-1212 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets.
network
low complexity
microsoft CWE-787
critical
9.8
2019-08-14 CVE-2019-1198 Unspecified vulnerability in Microsoft products
An elevation of privilege exists in SyncController.dll.
network
high complexity
microsoft
6.5
2019-08-14 CVE-2019-1188 Link Following vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user.
network
high complexity
microsoft CWE-59
7.5
2019-08-14 CVE-2019-1187 XXE vulnerability in Microsoft products
A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input.
local
low complexity
microsoft CWE-611
5.5
2019-08-14 CVE-2019-1186 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory.
local
high complexity
microsoft
7.0
2019-08-14 CVE-2019-1184 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls.
local
high complexity
microsoft
6.7
2019-08-14 CVE-2019-1183 Unspecified vulnerability in Microsoft products
This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194.
network
low complexity
microsoft
8.8
2019-08-14 CVE-2019-1182 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
critical
9.8