Microsoft Windows Server, version 1903 (Server Core installation)

• CVE-2020-17087 High 7.8 Exploited Windows Kernel Local Elevation of Privilege Vulnerability 5.4%
• CVE-2020-1472 Medium 5.5 Exploited Netlogon Elevation of Privilege Vulnerability 99.4%
• CVE-2020-1464 High 7.8 Exploited Windows Spoofing Vulnerability 38.9%
• CVE-2020-1350 Critical 10.0 Exploited A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'. 96.7%
• CVE-2020-0986 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from 16.4%
• CVE-2020-1054 High 7.0 Exploited Win32k Elevation of Privilege Vulnerability 53.9%
• CVE-2020-1027 High 7.8 Exploited An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2 4.7%
• CVE-2020-1020 High 8.8 Exploited A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. 65.0%
• CVE-2020-0938 High 7.8 Exploited A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. 69.0%
• CVE-2020-0796 Critical 10.0 Exploited A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution 99.8%
• CVE-2020-0787 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service E 42.5%
• CVE-2020-0683 High 7.8 Exploited An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique fr 7.7%
• CVE-2020-0638 High 7.8 Exploited An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim syst 2.5%
• CVE-2020-0601 High 8.1 Exploited A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code- 89.1%
• CVE-2019-1405 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerabi 30.2%
• CVE-2019-1385 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, 3.6%
• CVE-2019-1388 High 7.8 Exploited An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability 8.6%
• CVE-2019-1322 High 7.8 Exploited An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-201 18.8%
• CVE-2019-1315 High 7.8 Exploited An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE 3.5%
• CVE-2019-1253 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the 11.6%
• CVE-2019-1215 High 7.8 Exploited An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019- 19.3%
• CVE-2019-1214 High 7.8 Exploited An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privi 1.4%
• CVE-2019-1130 High 7.8 Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique f 1.7%
• CVE-2019-1129 High 7.8 Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique f 1.8%
• CVE-2019-0880 High 7.8 Exploited A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'. 2.3%
• CVE-2019-1069 High 7.8 Exploited Task Scheduler Elevation of Privilege Vulnerability 6.2%
• CVE-2019-1064 High 7.8 Exploited Windows Elevation of Privilege Vulnerability 6.9%
• CVE-2019-0903 High 8.8 Exploited A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. 21.7%
• CVE-2019-0863 High 7.8 Exploited An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. 5.2%
• CVE-2020-17162 High 8.8 Microsoft Windows Security Feature Bypass Vulnerability 2.4%
• CVE-2020-17140 High 8.1 Windows SMB Information Disclosure Vulnerability 15.3%
• CVE-2020-17139 High 7.8 Windows Overlay Filter Security Feature Bypass Vulnerability 0.9%
• CVE-2020-17136 High 7.8 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 13.8%
• CVE-2020-17134 High 7.8 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 1.2%
• CVE-2020-17096 High 7.5 Windows NTFS Remote Code Execution Vulnerability 19.5%
• CVE-2020-17097 Low 3.3 Windows Digital Media Receiver Elevation of Privilege Vulnerability 1.1%
• CVE-2020-17098 Medium 5.5 Windows GDI+ Information Disclosure Vulnerability 1.4%
• CVE-2020-17094 Medium 5.5 Windows Error Reporting Information Disclosure Vulnerability 1.4%
• CVE-2020-17095 High 8.5 Windows Hyper-V Remote Code Execution Vulnerability 5.0%
• CVE-2020-17092 High 7.8 Windows Network Connections Service Elevation of Privilege Vulnerability 1.0%
• CVE-2020-16996 Medium 6.5 Kerberos Security Feature Bypass Vulnerability 2.4%
• CVE-2020-16964 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.1%
• CVE-2020-16963 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.1%
• CVE-2020-16962 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.1%
• CVE-2020-16961 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.3%
• CVE-2020-16960 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.3%
• CVE-2020-16959 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.1%
• CVE-2020-16958 High 7.8 Windows Backup Engine Elevation of Privilege Vulnerability 1.1%
• CVE-2020-1599 Medium 5.5 Windows Spoofing Vulnerability 19.1%
• CVE-2020-17090 Medium 5.3 Microsoft Defender for Endpoint Security Feature Bypass Vulnerability 3.3%