Microsoft Windows Server, version 1909 (Server Core installation)

• CVE-2020-1520 High 7.8 Windows Font Driver Host Remote Code Execution Vulnerability 0.9%
• CVE-2020-1521 High 7.8 Windows Speech Runtime Elevation of Privilege Vulnerability 0.8%
• CVE-2020-1518 High 7.8 Windows File Server Resource Management Service Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1519 High 7.8 Windows UPnP Device Host Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1516 High 7.8 Windows Work Folders Service Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1517 High 7.8 Windows File Server Resource Management Service Elevation of Privilege Vulnerability 0.8%
• CVE-2020-1515 High 7.8 Windows Telephony Server Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1513 High 7.8 Windows CSC Service Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1512 High 7.8 Windows State Repository Service Information Disclosure Vulnerability 3.9%
• CVE-2020-1511 High 7.8 Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability 0.8%
• CVE-2020-1509 High 7.8 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability 3.3%
• CVE-2020-1492 Unrated Media Foundation Memory Corruption Vulnerability 3.5%
• CVE-2020-1490 Unrated Windows Storage Service Elevation of Privilege Vulnerability 0.7%
• CVE-2020-1489 High 7.8 Windows CSC Service Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1487 High 7.8 Media Foundation Information Disclosure Vulnerability 3.6%
• CVE-2020-1488 High 7.0 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability 0.8%
• CVE-2020-1486 High 7.8 Windows Kernel Elevation of Privilege Vulnerability 1.0%
• CVE-2020-1485 Medium 5.5 Windows Image Acquisition Service Information Disclosure Vulnerability 1.1%
• CVE-2020-1484 Unrated Windows Work Folders Service Elevation of Privilege Vulnerability 0.7%
• CVE-2020-1479 Unrated DirectX Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1480 High 7.8 Windows GDI Elevation of Privilege Vulnerability 0.9%
• CVE-2020-1478 High 7.8 Media Foundation Memory Corruption Vulnerability 2.7%
• CVE-2020-1477 High 7.0 Media Foundation Memory Corruption Vulnerability 2.5%
• CVE-2020-1475 High 7.8 Windows Server Resource Management Service Elevation of Privilege Vulnerability 1.2%
• CVE-2020-1473 High 7.0 Jet Database Engine Remote Code Execution Vulnerability 2.8%
• CVE-2020-1474 High 7.8 Windows Image Acquisition Service Information Disclosure Vulnerability 1.5%
• CVE-2020-1470 High 7.8 Windows Work Folders Service Elevation of Privilege Vulnerability 1.1%
• CVE-2020-1467 Critical 10.0 Windows Hard Link Elevation of Privilege Vulnerability 3.5%
• CVE-2020-1383 Unrated Windows RRAS Service Information Disclosure Vulnerability 1.1%
• CVE-2020-1417 Medium 5.5 Windows Kernel Elevation of Privilege Vulnerability 1.4%
• CVE-2020-1379 Medium 5.5 Media Foundation Memory Corruption Vulnerability 3.3%
• CVE-2020-1377 High 7.8 Windows Registry Elevation of Privilege Vulnerability 1.5%
• CVE-2020-1378 High 7.5 Windows Registry Elevation of Privilege Vulnerability 3.9%
• CVE-2020-1337 High 7.8 Windows Print Spooler Elevation of Privilege Vulnerability 14.2%
• CVE-2020-1339 High 7.8 Windows Media Remote Code Execution Vulnerability 3.3%
• CVE-2020-1468 Unrated An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. 5.2%
• CVE-2020-1463 Unrated An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'. 0.8%
• CVE-2020-1438 Unrated An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulner 0.8%
• CVE-2020-1436 Unrated A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vuln 21.3%
• CVE-2020-1437 Unrated An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Pr 0.8%
• CVE-2020-1434 Unrated An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'. 0.8%
• CVE-2020-1435 Unrated A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. 13.7%
• CVE-2020-1430 Unrated An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim s 0.8%
• CVE-2020-1431 Unrated An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, 0.8%
• CVE-2020-1428 Unrated An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulner 0.8%
• CVE-2020-1429 Unrated An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. 1.0%
• CVE-2020-1427 Unrated An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulner 0.8%
• CVE-2020-1426 Unrated An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2 1.3%
• CVE-2020-1424 Unrated An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. 1.4%
• CVE-2020-1422 Unrated An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE 0.8%