High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-10-16	CVE-2020-16973	Unspecified vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. local low complexity microsoft	7.8
2020-10-16	CVE-2020-16972	Unspecified vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. local low complexity microsoft	7.8
2020-10-16	CVE-2020-16940	Improper Privilege Management vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points. local low complexity microsoft CWE-269	7.8
2020-10-16	CVE-2020-16939	Link Following vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when Group Policy improperly checks access. local low complexity microsoft CWE-59	7.8
2020-10-16	CVE-2020-16936	Unspecified vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. local low complexity microsoft	7.8
2020-10-16	CVE-2020-16935	Unspecified vulnerability in Microsoft products <p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. local low complexity microsoft	7.8
2020-10-16	CVE-2020-16933	Unspecified vulnerability in Microsoft products <p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. local high complexity microsoft	7.0
2020-10-16	CVE-2020-16927	Unspecified vulnerability in Microsoft products <p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. network low complexity microsoft	7.5
2020-10-16	CVE-2020-16924	Unspecified vulnerability in Microsoft products <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. local low complexity microsoft	7.8
2020-10-16	CVE-2020-16923	Unspecified vulnerability in Microsoft products <p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. local low complexity microsoft	7.8