Vulnerabilities > Microsoft > Windows 10 > 1803

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16922 Improper Verification of Cryptographic Signature vulnerability in Microsoft products
<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures.
local
low complexity
microsoft CWE-347
5.3
2020-10-16 CVE-2020-16921 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory.
local
low complexity
microsoft
5.5
2020-10-16 CVE-2020-16920 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16919 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations.
local
low complexity
microsoft
5.5
2020-10-16 CVE-2020-16916 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16915 Out-of-bounds Write vulnerability in Microsoft products
<p>A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory.
local
low complexity
microsoft CWE-787
7.8
2020-10-16 CVE-2020-16914 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system.
local
low complexity
microsoft
5.5
2020-10-16 CVE-2020-16913 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16912 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16911 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory.
network
low complexity
microsoft
8.8