Vulnerabilities > Microsoft > Windows RT 8 1

DATE CVE VULNERABILITY TITLE RISK
2020-08-17 CVE-2020-1587 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-08-17 CVE-2020-1579 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-08-17 CVE-2020-1564 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory.
local
low complexity
microsoft
7.8
2020-08-17 CVE-2020-1562 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory.
local
low complexity
microsoft
7.8
2020-08-17 CVE-2020-1554 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory.
local
low complexity
microsoft CWE-787
7.8
2020-08-17 CVE-2020-1492 Out-of-bounds Write vulnerability in Microsoft products
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory.
local
low complexity
microsoft CWE-787
7.8
2020-08-17 CVE-2020-1484 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-08-17 CVE-2020-1383 Unspecified vulnerability in Microsoft products
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled.
local
low complexity
microsoft
5.5
2020-07-29 CVE-2020-15707 Integer Overflow or Wraparound vulnerability in multiple products
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow.
6.4
2020-07-29 CVE-2020-15706 Use After Free vulnerability in multiple products
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass.
6.4