Advisories · Technology
Microsoft Windows 10 Version 1903 for x64-based Systems.
Every CVE that names Microsoft Windows 10 Version 1903 for x64-based Systems among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows Server and others
- Microsoft Windows Server
- Microsoft Windows
- Path traversal
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows RDP client improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEVKEV
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- Path traversal
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- Path traversal
- CVSS 6.3 Medium
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.7 Medium
Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.7 Medium
Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 6.4 Medium
Comctl32 Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 5.3 Medium
Windows NTLM Tampering Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 8.5 HighCritical · CVSS 7+ and EPSS
Microsoft Windows Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.0 High
Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.7 Medium
Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Storage Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 6.3 Medium
Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Storage Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.0 High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 4.7 Medium
Windows Event Viewer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1709
-
Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.4 Medium
Microsoft IIS Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1803