Vulnerabilities > Microsoft > Windows Server 2016 > 1709

DATE CVE VULNERABILITY TITLE RISK
2020-05-21 CVE-2020-1087 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-269
4.6
2020-05-21 CVE-2020-1075 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
2.1
2020-03-12 CVE-2020-0775 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-200
2.1
2020-03-12 CVE-2020-0774 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
network
microsoft CWE-200
4.3
2019-06-12 CVE-2019-1021 Unspecified vulnerability in Microsoft products
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-05-16 CVE-2019-0892 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.2
2019-05-16 CVE-2019-0885 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
network
microsoft CWE-20
critical
9.3
2019-05-16 CVE-2019-0881 Insufficiently Protected Credentials vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-522
7.8
2019-04-09 CVE-2019-0879 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.2
2019-04-09 CVE-2019-0877 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.2