Vulnerabilities > Microsoft > Windows Server 2016 > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-06-09 CVE-2020-1234 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1233 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1232 Out-of-bounds Read vulnerability in Microsoft products
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.
network
microsoft CWE-125
4.3
2020-06-09 CVE-2020-1231 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1222 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-269
4.6
2020-06-09 CVE-2020-1217 Information Exposure vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulnerability'.
network
microsoft CWE-200
6.8
2020-06-09 CVE-2020-1212 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1211 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1209 Improper Privilege Management vulnerability in Microsoft Windows 10 and Windows Server 2016
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.8
2020-06-09 CVE-2020-1206 Information Exposure vulnerability in Microsoft Windows 10 and Windows Server 2016
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-200
5.0