Microsoft Windows 10 vulnerabilities

CVE-2020-17000 [MEDIUM] CVE-2020-17000: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2021-1672 [MEDIUM] CVE-2021-1672: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2020-1358 [MEDIUM] CVE-2020-1358: An information disclosure vulnerability exists when the Windows Resource Policy component improperly An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Resource Policy Information Disclosure Vulnerability'.

CVE-2020-1361 [MEDIUM] CVE-2020-1361: An information disclosure vulnerability exists in the way that the WalletService handles memory.To e An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.

CVE-2020-1420 [MEDIUM] CVE-2020-1420: An information disclosure vulnerability exists when Windows Error Reporting improperly handles file An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.

CVE-2020-1330 [MEDIUM] CVE-2020-1330: An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnosti An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.

CVE-2020-1386 [MEDIUM] CVE-2020-1386: An information vulnerability exists when Windows Connected User Experiences and Telemetry Service im An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.

CVE-2020-1116 [MEDIUM] CVE-2020-1116: An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CS An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerability'.

CVE-2021-1670 [MEDIUM] CVE-2021-1670: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2021-1663 [MEDIUM] CVE-2021-1663: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2018-8549 [MEDIUM] CVE-2018-8549: A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "W A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

CVE-2020-0941 [MEDIUM] CVE-2020-0941: <p>An information disclosure vulnerability exists when the win32k component improperly provides kern An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would have to either log on locally to an affected system, or convince a locally au

CVE-2020-1083 [MEDIUM] CVE-2020-1083: <p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component impr An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially c

CVE-2020-1119 [MEDIUM] CVE-2020-1119: <p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The

CVE-2020-0914 [MEDIUM] CVE-2020-0914: <p>An information disclosure vulnerability exists when the Windows State Repository Service improper An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system.

CVE-2020-1250 [MEDIUM] CVE-2020-1250: <p>An information disclosure vulnerability exists when the win32k component improperly provides kern An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application

CVE-2021-26892 [MEDIUM] CVE-2021-26892: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

CVE-2019-0942 [MEDIUM] CVE-2019-0942: An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry, aka 'Unified Write Filter Elevation of Privilege Vulnerability'.

CVE-2021-31970 [MEDIUM] CWE-639 CVE-2021-31970: Windows TCP/IP Driver Security Feature Bypass Vulnerability Windows TCP/IP Driver Security Feature Bypass Vulnerability

CVE-2019-1454 [MEDIUM] CWE-269 CVE-2019-1454: An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) impro An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.