Vulnerabilities > Microsoft > Windows Server 2016 > High

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16913 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16912 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16911 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory.
network
low complexity
microsoft
8.8
2020-10-16 CVE-2020-16909 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16907 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.
local
low complexity
microsoft
7.8
2020-10-16 CVE-2020-16902 Improper Privilege Management vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.</p> <p>A locally authenticated attacker could run arbitrary code with elevated system privileges.
local
low complexity
microsoft CWE-269
7.8
2020-10-16 CVE-2020-16900 Unspecified vulnerability in Microsoft products
<p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system.
local
high complexity
microsoft
7.0
2020-10-16 CVE-2020-16899 Unspecified vulnerability in Microsoft products
<p>A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets.
network
low complexity
microsoft
7.5
2020-10-16 CVE-2020-16898 Unspecified vulnerability in Microsoft products
<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets.
low complexity
microsoft
8.8
2020-10-16 CVE-2020-16896 Unspecified vulnerability in Microsoft products
<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests.
network
low complexity
microsoft
7.5