Advisories · Technology
Microsoft Windows 10 Version 1903 for ARM64-based Systems.
Every CVE that names Microsoft Windows 10 Version 1903 for ARM64-based Systems among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could ga…
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
-
Microsoft Windows: A security feature bypass vulnerability exists when Windows Netlogon improperly handles a…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information vulnerability exists when Windows Modules Installer Service improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists due to a race condition in Windows…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Installer because of the way…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows Remote Procedure Call…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper privilege management in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Privilege escalation
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Improper privilege management in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Privilege escalation
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: A security feature bypass vulnerability exists where a NETLOGON message is able to obtain…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Code Integrity…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when umpo.dll of the Power Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows AppX Deployment Server that…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when Windows Update Client fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Windows redirected drive buffering…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows CloudStore improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles hard links…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server…
- Microsoft Windows
- Microsoft Windows Server