Exposure of Windows Server

Operating systems
1,429
exposure score
221,496
sites use
32
exploited
3
critical

CVEs

755 results
CVE-2020-0885—An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows EPSS 4.6%CVE-2020-1267—This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attEPSS 4.5%CVE-2019-0865—A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit thEPSS 4.5%CVE-2019-0811—A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial EPSS 4.5%CVE-2020-1217—An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime InformatiEPSS 4.5%CVE-2020-0665—An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trustEPSS 4.4%CVE-2019-0730—An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows ElevationEPSS 4.4%CVE-2019-1365—An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to itEPSS 4.4%CVE-2019-0731—An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows ElevationEPSS 4.4%CVE-2020-1317—An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege VulnerabEPSS 4.3%CVE-2019-0836—An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows ElevationEPSS 4.3%CVE-2019-0637—A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connEPSS 4.3%CVE-2019-0796—An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows ElevationEPSS 4.2%CVE-2019-0734—An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and repEPSS 4.2%CVE-2020-0645—A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server TamperingEPSS 3.9%CVE-2019-0732—A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handlEPSS 3.8%CVE-2020-0728—An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules InstaEPSS 3.8%CVE-2020-1309—An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an EPSS 3.8%CVE-2019-0735—An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects inEPSS 3.7%CVE-2019-1338—A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLEPSS 3.6%