windows_server_2008

microsoft / windows_10+16

Page 1 of 25

CVE-2020-1467

CRITICAL10.0

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows handles hard links.

Published Aug 17, 2020

CVE-2021-26424

CRITICAL9.9

Windows TCP/IP Remote Code Execution Vulnerability

microsoft / windows_10+22

Published Aug 12, 2021

CVE-2020-1112

CRITICAL9.9

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

Published May 21, 2020

CVE-2021-28476

CRITICAL9.9

Windows Hyper-V Remote Code Execution Vulnerability

Published May 11, 2021

CVE-2021-26897

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2021-26877

microsoft / windows_server_2008+8

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-26895

Windows DNS Server Remote Code Execution Vulnerability

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

Published Nov 11, 2020

CVE-2021-24094

microsoft / windows_10+18

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2021-24077

microsoft / windows_10+18

Windows Fax Service Remote Code Execution Vulnerability

CVE-2021-24078

microsoft / windows_server_2008+8

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-26894

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-26893

microsoft / windows_server_2008+8

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-31962

CRITICAL9.4

Kerberos AppContainer Security Feature Bypass Vulnerability

Published Jun 8, 2021

CVE-2020-1041

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1042, CVE-2020-1043.

CVE-2020-1043

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042.

CVE-2020-1042

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1043.

CVE-2020-1032

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.