Vulnerabilities > Microsoft > Windows 10 > 1803

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16967 Unspecified vulnerability in Microsoft Windows 10
<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16949 Memory Leak vulnerability in Microsoft products
<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory.
local
high complexity
microsoft CWE-401
4.7
2020-10-16 CVE-2020-16940 Improper Privilege Management vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points.
local
low complexity
microsoft CWE-269
7.8
2020-10-16 CVE-2020-16939 Link Following vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when Group Policy improperly checks access.
local
low complexity
microsoft CWE-59
7.8
2020-10-16 CVE-2020-16936 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16935 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16933 Unspecified vulnerability in Microsoft products
<p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files.
local
high complexity
microsoft
7.0
2020-10-16 CVE-2020-16927 Unspecified vulnerability in Microsoft products
<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
7.5
2020-10-16 CVE-2020-16924 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16923 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory.
local
low complexity
microsoft
7.8