Vulnerabilities > Microsoft > Windows 7

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16933 Unspecified vulnerability in Microsoft products
<p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files.
local
high complexity
microsoft
7.0
2020-10-16 CVE-2020-16924 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16923 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16922 Improper Verification of Cryptographic Signature vulnerability in Microsoft products
<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures.
local
low complexity
microsoft CWE-347
5.3
2020-10-16 CVE-2020-16920 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16914 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system.
local
low complexity
microsoft
5.5
2020-10-16 CVE-2020-16912 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16911 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory.
network
low complexity
microsoft
8.8
2020-10-16 CVE-2020-16902 Improper Privilege Management vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.</p> <p>A locally authenticated attacker could run arbitrary code with elevated system privileges.
local
low complexity
microsoft CWE-269
7.8
2020-10-16 CVE-2020-16900 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
high complexity
microsoft
7.0