CVE-2021-1652

Windows CSC Service Elevation of Privilege Vulnerability

Windows CSC Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2021-1649

Active Template Library Elevation of Privilege Vulnerability

Active Template Library Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2020-1599

Windows Spoofing Vulnerability

Windows Spoofing Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 19.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 10.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 8 more

CVE-2020-17049

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

CVSS 3.1 · 6.6 Medium EPSS 13.8% KEV · Not listed

Vendors

Microsoft Redhat Samba

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 10 more

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

Windows KernelStream Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17014

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17011

Windows Port Class Library Elevation of Privilege Vulnerability

Windows Port Class Library Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17001

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-0921

Microsoft Graphics Component Denial of Service Vulnerability

Microsoft Graphics Component Denial of Service Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 16 more