CVE-2020-0787
- EPSS 59.75%
- Published 12.03.2020 16:15:15
- Last modified 04.04.2025 13:01:58
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CVE-2020-0683
- EPSS 24.84%
- Published 11.02.2020 22:15:15
- Last modified 10.04.2025 16:56:30
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
CVE-2020-0601
- EPSS 94.04%
- Published 14.01.2020 23:15:30
- Last modified 10.04.2025 16:54:50
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable...
CVE-2019-1458
- EPSS 92.6%
- Published 10.12.2019 22:15:16
- Last modified 08.04.2025 15:38:28
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
CVE-2019-1388
- EPSS 3.45%
- Published 12.11.2019 19:15:12
- Last modified 10.04.2025 16:56:36
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
CVE-2019-1215
- EPSS 3.05%
- Published 11.09.2019 22:15:14
- Last modified 03.04.2025 20:46:54
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.
CVE-2019-1130
- EPSS 3.99%
- Published 15.07.2019 19:15:21
- Last modified 03.04.2025 21:02:00
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
CVE-2019-0880
- EPSS 1.37%
- Published 15.07.2019 19:15:15
- Last modified 30.07.2025 19:01:17
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
CVE-2019-1069
- EPSS 29.84%
- Published 12.06.2019 14:29:04
- Last modified 21.05.2025 18:33:02
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnera...
CVE-2019-0903
- EPSS 50.83%
- Published 16.05.2019 19:29:02
- Last modified 03.04.2025 21:01:40
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.