WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0869 | 8.8 | Mar 12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0809 | 8.8 | Mar 12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0807 | 8.8 | Mar 12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1803; 1809; 1903; 1909 |
| CVE-2020-0801 | 8.8 | Mar 12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0684 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0792 | 8.8 | Feb 11 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege… Affected: 1903; 1909 |
| CVE-2020-0738 | 8.8 | Feb 11 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0734 | 8.8 | Feb 11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0729 | 8.8 | Feb 11 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2020-0662 | 8.8 | Feb 11 | A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability' Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2019-1468 | 8.8 | Dec 10 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution… Affected: 1607; 1709; 1803; 1809; 1903; 1909 |
| CVE-2019-1456 | 8.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType… Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2019-1419 | 8.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType… Affected: 1607; 1709; 1803; 1809; 1903 |
| CVE-2019-1333 | 8.8 | Oct 10 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1060 | 8.8 | Oct 10 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1291 | 8.8 | Sep 11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1290 | 8.8 | Sep 11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0788 | 8.8 | Sep 11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0787 | 8.8 | Sep 11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1183 | 8.8 | Aug 14 | This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates for the vulnerability discussed in CVE-2019-1194 Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1152 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1151 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1150 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1149 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1145 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1144 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-1128 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1127 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1124 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1123 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1122 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1121 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1120 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1119 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1118 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1117 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1102 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0888 | 8.8 | Jun 12 | A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0722 | 8.8 | Jun 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0902 | 8.8 | May 16 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0853 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0845 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0842 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0795 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0794 | 8.8 | Apr 9 | A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0793 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0792 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0791 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0790 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0772 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
The 500 most important CVEs for this product (exploited first, then by severity)
