Vulnerabilities > Microsoft > Windows Server 2016 > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-07-15 CVE-2019-1087 Unspecified vulnerability in Microsoft products
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-07-15 CVE-2019-1086 Unspecified vulnerability in Microsoft products
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-07-15 CVE-2019-1085 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-07-15 CVE-2019-1083 Data Processing Errors vulnerability in Microsoft .Net Framework
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.
network
low complexity
microsoft CWE-19
5.0
2019-07-15 CVE-2019-1037 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
local
microsoft
6.9
2019-07-15 CVE-2019-1006 Improper Certificate Validation vulnerability in Microsoft products
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
network
low complexity
microsoft CWE-295
5.0
2019-07-15 CVE-2019-0975 Unspecified vulnerability in Microsoft Windows Server 2016 and Windows Server 2019
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.
network
microsoft
6.8
2019-07-15 CVE-2019-0966 Improper Input Validation vulnerability in Microsoft products
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'.
low complexity
microsoft CWE-20
5.5
2019-07-15 CVE-2019-0880 Unspecified vulnerability in Microsoft products
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
4.6
2019-07-15 CVE-2019-0865 Unspecified vulnerability in Microsoft products
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures., aka 'SymCrypt Denial of Service Vulnerability'.
network
low complexity
microsoft
5.0