An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480 CVE-2018-8488 CVE-2018-8498.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows Server 2008 Windows 7 Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124 CVE-2018-8164 CVE-2018-8166.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft Project Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8639.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8120 CVE-2018-8164 CVE-2018-8166.


An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it aka \Windows NDIS Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8343.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8568.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Microsoft Project Server. This CVE ID is unique from CVE-2018-8149 CVE-2018-8155 CVE-2018-8168.


An elevation of privilege vulnerability exists when Windows allowing a sandbox escape aka \Windows Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions aka \Windows Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8399.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8254.


An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels aka \Hypervisor Code Integrity Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8428.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572.


An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions aka \Windows Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8314.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations aka \Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability.\ This affects Microsoft Visual Studio Windows Server 2019 Windows Server 2016 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server aka \Microsoft SharePoint Server Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory aka \Windows Registry Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry aka \Windows Desktop Bridge Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8208.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 10 Servers Windows 10. This CVE ID is unique from CVE-2018-8404.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8155 CVE-2018-8156 CVE-2018-8168.


An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests aka \Microsoft Office Elevation of Privilege Vulnerability.\ This affects Microsoft Office Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8299.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC) aka \Windows ALPC Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8149 CVE-2018-8156 CVE-2018-8168.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8120 CVE-2018-8124 CVE-2018-8166.


An elevation of privilege vulnerability exists when NTFS improperly checks access aka \NTFS Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry aka \Windows Desktop Bridge Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8214.


An elevation of privilege exists in Windows COM Aggregate Marshaler aka \Windows COM Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-8149 CVE-2018-8155 CVE-2018-8156.


An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser aka \Microsoft Edge Elevation of Privilege Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8469.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8431.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002.


AppContainer in Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled aka \Windows AppContainer Elevation Of Privilege Vulnerability\.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0944 and CVE-2018-0947.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Windows Subsystem for Linux in Windows 10 version 1703 Windows 10 version 1709 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Subsystem for Linux Elevation of Privilege Vulnerability\.


The Windows kernel in Windows 10 versions 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled aka \Windows Kernel Elevation of Privilege Vulnerability\.


The Windows kernel in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Kernel Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0756. CVE-2018-0809 CVE-2018-0820 and CVE-2018-0843.


Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored aka \Windows Elevation of Privilege Vulnerability\.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 and CVE-2018-0947.


The Windows kernel in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Kernel Elevation Of Privilege Vulnerability\. This CVE is unique from CVE-2018-0742 CVE-2018-0756 CVE-2018-0809 and CVE-2018-0843.


The Windows Kernel API in Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions aka \Windows Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2018-0751.


The Desktop Bridge in Windows 10 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed aka \Windows Desktop Bridge Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0880.


Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allow an elevation of privilege vulnerability due to how objects in memory are handled aka \Windows Kernel Elevation of Privilege Vulnerability\.


The Windows kernel in Windows 10 versions 1703 and 1709 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0742 CVE-2018-0756 CVE-2018-0820 and CVE-2018-0843.


The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows GDI Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0816 and CVE-2018-0817.


Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20 Microsoft Exchange Server 2013 Cumulative Update 18 Microsoft Exchange Server 2013 Cumulative Update 19 Microsoft Exchange Server 2013 Service Pack 1 Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allows an elevation of privilege vulnerability due to how links in the body of an email message are rewritten aka \Microsoft Exchange Elevation of Privilege Vulnerability\.


The Windows kernel in Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Kernel Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0742 CVE-2018-0809 CVE-2018-0820 and CVE-2018-0843.


The Windows Common Log File System (CLFS) driver in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled aka \Windows Common Log File System Driver Elevation Of Privilege Vulnerability\. This CVE is unique from CVE-2018-0844.


The Desktop Bridge Virtual File System (VFS) in Windows 10 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how file paths are managed aka \Windows Desktop Bridge VFS Elevation of Privilege Vulnerability\.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain due to how Microsoft Edge enforces cross-domain policies aka \Microsoft Edge Elevation of Privilege Vulnerability\.


Microsoft Outlook 2007 Microsoft Outlook 2010 Microsoft Outlook 2013 Microsoft Outlook 2016 and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated aka \Microsoft Outlook Elevation of Privilege Vulnerability\.


An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations aka \Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Microsoft Visual Studio Windows 10 Servers.


The Windows kernel in Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Elevation of Privilege Vulnerability\.


The Desktop Bridge in Windows 10 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed aka \Windows Desktop Bridge Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0882.


NTFS in Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects aka \Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability\.


SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled aka \Microsoft SharePoint Elevation of Privilege Vulnerability\.


The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \OpenType Font Driver Elevation of Privilege Vulnerability\.


The Windows kernel mode driver in Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory aka \Win32k Elevation of Privilege Vulnerability\.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0914 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


The Windows kernel in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way memory addresses are handled aka \Windows Elevation of Privilege Vulnerability\.


Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0789.


The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows GDI Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0815 and CVE-2018-0816.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0910 CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allow elevation of privilege due to how Internet Explorer handles zone and integrity settings aka \Internet Explorer Elevation of Privilege Vulnerability\.


Windows Storage Services in Windows 10 versions 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows Storage Services Elevation of Privilege Vulnerability\.


The Windows Common Log File System (CLFS) driver in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled aka \Windows Common Log File System Driver Elevation Of Privilege Vulnerability\. This CVE is unique from CVE-2018-0846.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


The Windows Kernel API in Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions aka \Windows Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2018-0752.


The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege due to how objects are handled in memory aka \Microsoft Video Control Elevation of Privilege Vulnerability\.


Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to how input is sanitized aka \Windows Installer Elevation of Privilege Vulnerability\.


Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 and CVE-2018-0944.


The Named Pipe File System in Windows 10 version 1709 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects aka \Named Pipe File System Elevation of Privilege Vulnerability\.


Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0790.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


The Microsoft Server Message Block (SMB) Server in Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way SMB Server handles specially crafted files aka \Windows Elevation of Privilege Vulnerability\.


The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory aka \Windows GDI Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0815 and CVE-2018-0817.


Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM 2016 server aka \Microsoft Identity Manager XSS Elevation of Privilege Vulnerability.\


Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0910. CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized aka \Microsoft SharePoint Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2018-0909 CVE-2018-0911 CVE-2018-0912 CVE-2018-0913 CVE-2018-0914 CVE-2018-0915 CVE-2018-0916 CVE-2018-0917 CVE-2018-0921 CVE-2018-0923 CVE-2018-0944 and CVE-2018-0947.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1014 CVE-2018-1032 CVE-2018-1034.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1005 CVE-2018-1014 CVE-2018-1032.


The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1005 CVE-2018-1032 CVE-2018-1034.


An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory aka \OpenType Font Driver Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when NTFS improperly checks access aka \NTFS Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint. This CVE ID is unique from CVE-2018-1005 CVE-2018-1014 CVE-2018-1034.


Windows Error Reporting Elevation of Privilege Vulnerability


Windows USO Core Worker Elevation of Privilege Vulnerability


Windows Print Configuration Elevation of Privilege Vulnerability


Windows Update Medic Service Elevation of Privilege Vulnerability


Windows Bind Filter Driver Elevation of Privilege Vulnerability


Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17073 CVE-2020-17076.


Microsoft SharePoint Elevation of Privilege Vulnerability


Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17073 CVE-2020-17074.


Windows Kernel Local Elevation of Privilege Vulnerability


DirectX Graphics Kernel Elevation of Privilege Vulnerability


Windows Digital Media Receiver Elevation of Privilege Vulnerability


Windows Network Connections Service Elevation of Privilege Vulnerability


Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17074 CVE-2020-17076.


Windows Port Class Library Elevation of Privilege Vulnerability


Windows Update Stack Elevation of Privilege Vulnerability


Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability


An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16928 CVE-2020-16955.


An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16934 CVE-2020-16955.


An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations aka 'Windows Application Compatibility Client Library Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16876.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16936 CVE-2020-16972 CVE-2020-16974 CVE-2020-16975 CVE-2020-16976.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16936 CVE-2020-16972 CVE-2020-16973 CVE-2020-16974 CVE-2020-16975.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16936 CVE-2020-16973 CVE-2020-16974 CVE-2020-16975 CVE-2020-16976.


An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions. aka 'Azure Functions Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16936 CVE-2020-16972 CVE-2020-16973 CVE-2020-16975 CVE-2020-16976.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16936 CVE-2020-16972 CVE-2020-16973 CVE-2020-16974 CVE-2020-16975 CVE-2020-16976.


An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations aka 'Windows Application Compatibility Client Library Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16920.


An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16928 CVE-2020-16934.


An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16972 CVE-2020-16973 CVE-2020-16974 CVE-2020-16975 CVE-2020-16976.


An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory.An attacker who successfully exploited the vulnerability could execute code with elevated permissions.To exploit the vulnerability a locally authenticated attacker could run a specially crafted application.The security update addresses the vulnerability by ensuring the Windows kernel image properly handles objects in memory. aka 'Windows Image Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16912 CVE-2020-16936 CVE-2020-16972 CVE-2020-16973 CVE-2020-16974 CVE-2020-16976.


An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An attacker does not require any privilege on the target system in order to exploit this vulnerability. One option is the self-service option on the Windows login screen. Upon selecting this option the thick-client software is launched which connects to a remote ADSelfService Plus server to facilitate self-service operations. An unauthenticated attacker having physical access to the host could trigger a security alert by supplying a self-signed SSL certificate to the client. The View Certificate option from the security alert allows an attacker to export a displayed certificate to a file. This can further cascade to a dialog that can open Explorer as SYSTEM. By navigating from Explorer to \\windows\\system32 cmd.exe can be launched as a SYSTEM.


Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default the Authenticated Users group has Modify permissions to the installation folder. Because of this any user on the system can replace binaries or plant malicious DLLs to obtain elevated or different privileges depending on the context of the user that runs the application.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740 CVE-2020-0741 CVE-2020-0743 CVE-2020-0749 CVE-2020-0750.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0770 CVE-2020-0860.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668 CVE-2020-0669 CVE-2020-0670 CVE-2020-0672.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0797 CVE-2020-0800 CVE-2020-0864 CVE-2020-0865 CVE-2020-0866 CVE-2020-0897.


An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679 CVE-2020-0682.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system aka 'Windows ALPC Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest aka 'Active Directory Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779 CVE-2020-0798 CVE-2020-0814 CVE-2020-0843.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942 CVE-2020-1029.


An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability an attacker would first have to log on to the system aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0762.


An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.


An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows RSoP Service Application Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0633.


An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680 CVE-2020-0682.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001 CVE-2020-1006 CVE-2020-1017.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779 CVE-2020-0798 CVE-2020-0814 CVE-2020-0842.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system.An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.The update addresses the vulnerability by not permitting Diagnostics Hub Standard Collector or the Visual Studio Standard Collector to create files in arbitrary locations. aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability an attacker would first have to log on to the system aka 'Windows Defender Security Center Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0763.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0800 CVE-2020-0864 CVE-2020-0865 CVE-2020-0866 CVE-2020-0897.


An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Wireless Network Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779 CVE-2020-0798 CVE-2020-0842 CVE-2020-0843.


An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1146.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740 CVE-2020-0741 CVE-2020-0742 CVE-2020-0749 CVE-2020-0750.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0806.


An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0737.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0797 CVE-2020-0864 CVE-2020-0865 CVE-2020-0866 CVE-2020-0897.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668 CVE-2020-0669 CVE-2020-0671 CVE-2020-0672.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0797 CVE-2020-0800 CVE-2020-0864 CVE-2020-0865 CVE-2020-0897.


An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0858.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778 CVE-2020-0802 CVE-2020-0803 CVE-2020-0845.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0797 CVE-2020-0800 CVE-2020-0864 CVE-2020-0865 CVE-2020-0866.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740 CVE-2020-0741 CVE-2020-0742 CVE-2020-0743 CVE-2020-0750.


An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0802 CVE-2020-0803 CVE-2020-0804 CVE-2020-0845.


An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability an authenticated attacker would need to place a specially crafted file in a specific location thereby allowing arbitrary file corruption.The security update addresses the vulnerability by correcting how the process validates the log file. aka 'Microsoft Office Tampering Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778 CVE-2020-0802 CVE-2020-0803 CVE-2020-0804.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0770 CVE-2020-0773.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740 CVE-2020-0742 CVE-2020-0743 CVE-2020-0749 CVE-2020-0750.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778 CVE-2020-0803 CVE-2020-0804 CVE-2020-0845.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0773 CVE-2020-0860.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0797 CVE-2020-0800 CVE-2020-0865 CVE-2020-0866 CVE-2020-0897.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668 CVE-2020-0669 CVE-2020-0670 CVE-2020-0671.


An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0731.


An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0771.


An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0983 CVE-2020-1009 CVE-2020-1011 CVE-2020-1015.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0741 CVE-2020-0742 CVE-2020-0743 CVE-2020-0749 CVE-2020-0750.


An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779 CVE-2020-0814 CVE-2020-0842 CVE-2020-0843.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778 CVE-2020-0802 CVE-2020-0804 CVE-2020-0845.


An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0769.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0731.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777 CVE-2020-0797 CVE-2020-0800 CVE-2020-0864 CVE-2020-0866 CVE-2020-0897.


An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Update Notification Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679 CVE-2020-0680.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'.


A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798 CVE-2020-0814 CVE-2020-0842 CVE-2020-0843.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740 CVE-2020-0741 CVE-2020-0742 CVE-2020-0743 CVE-2020-0749.


An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0776.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0629 CVE-2020-0630 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario an attacker could host a website that is used to attempt to exploit the vulnerability aka 'Microsoft Edge Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0944 CVE-2020-1029.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613 CVE-2020-0614 CVE-2020-0623 CVE-2020-0625 CVE-2020-0626 CVE-2020-0627 CVE-2020-0628 CVE-2020-0629 CVE-2020-0631 CVE-2020-0632 CVE-2020-0633.


An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CDP User Components Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1550.


An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934 CVE-2020-0983 CVE-2020-1009 CVE-2020-1011.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373 CVE-2020-1427 CVE-2020-1428 CVE-2020-1438.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547.


An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934 CVE-2020-0983 CVE-2020-1009 CVE-2020-1015.


An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1430.


An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1371.


An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input leading to an unsecure library-loading behavior aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1393.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1316.


An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934 CVE-2020-0983 CVE-2020-1011 CVE-2020-1015.


An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management resulting in access to system files.To exploit this vulnerability an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges. aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly. aka 'Windows Lockscreen Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1365.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario an attacker could host a website that is used to attempt to exploit the vulnerability aka 'Microsoft Edge Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272 CVE-2020-1302 CVE-2020-1312.


An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Work Folders Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1470 CVE-2020-1484.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940 CVE-2020-1006 CVE-2020-1017.


An elevation of privilege vulnerability exists when the Windows Custom Protocol Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Custom Protocol Engine Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.


An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Speech Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1521.


An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1489.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207 CVE-2020-1251 CVE-2020-1253 CVE-2020-1310.


An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability an attacker would first have to access the local machine and then run a malicious program.The update addresses the vulnerability by correcting how .NET Framework activates COM objects. aka '.NET Framework Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272 CVE-2020-1277 CVE-2020-1302.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373 CVE-2020-1390 CVE-2020-1427 CVE-2020-1428.


An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows File Server Resource Management Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1518.


An elevation of privilege vulnerability exists when the Windows Network Connection Broker improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Network Connection Broker Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307.


An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1277 CVE-2020-1302 CVE-2020-1312.


An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942 CVE-2020-0944.


An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows InstallService Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.


An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278 CVE-2020-1293.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272 CVE-2020-1277 CVE-2020-1312.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CDP User Components Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1549.


An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1068 CVE-2020-1079.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257 CVE-2020-1278.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373 CVE-2020-1390 CVE-2020-1427 CVE-2020-1438.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1354.


An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207 CVE-2020-1247 CVE-2020-1251 CVE-2020-1310.


An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability an attacker would first have to log on to the system aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1324.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940 CVE-2020-1001 CVE-2020-1017.


An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1519.


An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Work Folders Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1470 CVE-2020-1516.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207 CVE-2020-1247 CVE-2020-1251 CVE-2020-1253.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request aka 'Local Security Authority Subsystem Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Telephony Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Defender Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'OLE Automation Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Speech Shell Components improperly handle memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Speech Shell Components Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability an attacker would require unprivileged execution on the victim system aka 'Windows Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Remote Access Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1537.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft OneDrive Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input leading to an unsecure library-loading behavior aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1418.


An elevation of privilege vulnerability exists when the Windows Radio Manager API improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Radio Manager API Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1538.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1257 CVE-2020-1293.


An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management resulting in access to system files.To exploit this vulnerability an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges. aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010 CVE-2020-1079.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207 CVE-2020-1247 CVE-2020-1253 CVE-2020-1310.


An elevation of privilege vulnerability exists when the Windows Accounts Control improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Accounts Control Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Picker Platform Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247 CVE-2020-1251 CVE-2020-1253 CVE-2020-1310.


An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows USO Core Worker Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940 CVE-2020-1001 CVE-2020-1006.


An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Modules Installer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows File Server Resource Management Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1517.


An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1513.


An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0766.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1202.


An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system aka 'Windows ALPC Elevation of Privilege Vulnerability'.