Vulnerabilities > Microsoft > Windows 10 > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-09-11 CVE-2020-1250 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information.
local
low complexity
microsoft
5.5
2020-09-11 CVE-2020-1159 Unspecified vulnerability in Microsoft Windows 10 and Windows Server 2016
<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations.
local
low complexity
microsoft
6.6
2020-09-11 CVE-2020-1152 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys.
local
high complexity
microsoft
5.8
2020-09-11 CVE-2020-1146 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
6.6
2020-09-11 CVE-2020-1133 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations.
local
low complexity
microsoft
5.5
2020-09-11 CVE-2020-1130 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations.
local
low complexity
microsoft
6.6
2020-09-11 CVE-2020-1122 Improper Check for Unusual or Exceptional Conditions vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations.
local
low complexity
microsoft CWE-754
5.5
2020-09-11 CVE-2020-1119 Unspecified vulnerability in Microsoft Windows 10 and Windows Server 2016
<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory.
local
low complexity
microsoft
5.5
2020-09-11 CVE-2020-1097 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory.
network
low complexity
microsoft
6.5
2020-09-11 CVE-2020-1091 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory.
network
low complexity
microsoft
6.5