2020 CVEs (page 102)
Page 102 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1303 | Medium | 5.5 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vu… |
CVE-2020-1285 | High | 8.4 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who succ… |
CVE-2020-1256 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully… |
CVE-2020-1252 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convi… |
CVE-2020-1250 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the… |
CVE-2020-1245 | High | 7.0 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully… |
CVE-2020-1228 | High | 7.5 | 2020-09-11 | <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability… |
CVE-2020-1227 | Medium | 5.4 | 2020-09-11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… |
CVE-2020-1224 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerabi… |
CVE-2020-1218 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exp… |
CVE-2020-1210 | Critical | 9.9 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attack… |
CVE-2020-1205 | Medium | 4.6 | 2020-09-11 | <p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server… |
CVE-2020-1200 | High | 8.6 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attack… |
CVE-2020-1198 | High | 7.4 | 2020-09-11 | <p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… |
CVE-2020-1193 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe… |
CVE-2020-1180 | Medium | 4.2 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo… |
CVE-2020-1172 | Medium | 4.2 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo… |
CVE-2020-1169 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vu… |
CVE-2020-1159 | Medium | 6.6 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfu… |
CVE-2020-1152 | Medium | 5.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited the vulnerability… |
CVE-2020-1146 | Medium | 6.6 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, an attacker… |
CVE-2020-1133 | Medium | 5.5 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully… |
CVE-2020-1130 | Medium | 6.6 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully… |
CVE-2020-1129 | High | 8.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploi… |
CVE-2020-1122 | Medium | 5.5 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exp… |
CVE-2020-1119 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully exploited the vulne… |
CVE-2020-1115 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File… |
CVE-2020-1098 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully ex… |
CVE-2020-1097 | Medium | 6.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully… |
CVE-2020-1091 | Medium | 6.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully… |
CVE-2020-1083 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfu… |
CVE-2020-1074 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploit… |
CVE-2020-1057 | Medium | 4.2 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo… |
CVE-2020-1053 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability… |
CVE-2020-1052 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnera… |
CVE-2020-1045 | High | 7.5 | 2020-09-11 | <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes… |
CVE-2020-1044 | Medium | 4.3 | 2020-09-11 | <p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly validates attachments uploaded to reports… |
CVE-2020-1039 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploit… |
CVE-2020-1038 | Medium | 5.5 | 2020-09-11 | <p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vul… |
CVE-2020-1034 | Medium | 6.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vuln… |
CVE-2020-1033 | Medium | 4.0 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vul… |
CVE-2020-1031 | High | 7.5 | 2020-09-11 | <p>An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory.</p> <p>To ex… |
CVE-2020-1030 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker wh… |
CVE-2020-1013 | High | 7.5 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerabil… |
CVE-2020-1012 | High | 8.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnera… |
CVE-2020-16884 | Medium | 4.2 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory… |
CVE-2020-16881 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who succ… |
CVE-2020-16879 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploi… |
CVE-2020-16878 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16875 | High | 8.4 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfull… |
CVE-2020-16874 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulne… |
CVE-2020-16873 | Medium | 4.7 | 2020-09-11 | <p>A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerabil… |
CVE-2020-16872 | High | 7.6 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16871 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16864 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16862 | High | 7.1 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected… |
CVE-2020-16861 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16860 | Medium | 6.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected… |
CVE-2020-16859 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16858 | Medium | 5.4 | 2020-09-11 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affec… |
CVE-2020-16857 | High | 7.1 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfull… |
CVE-2020-16856 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulne… |
CVE-2020-16855 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclo… |
CVE-2020-16854 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vul… |
CVE-2020-16853 | High | 7.1 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf… |
CVE-2020-16852 | High | 7.1 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf… |
CVE-2020-16851 | High | 7.1 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf… |
CVE-2020-0998 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploi… |
CVE-2020-0997 | High | 7.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited… |
CVE-2020-0989 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions. An attacker who success… |
CVE-2020-0951 | Medium | 6.7 | 2020-09-11 | <p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An a… |
CVE-2020-0941 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the… |
CVE-2020-0928 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vul… |
CVE-2020-0922 | High | 8.8 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the… |
CVE-2020-0921 | Medium | 5.5 | 2020-09-11 | Microsoft Graphics Component Denial of Service Vulnerability |
CVE-2020-0914 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully… |
CVE-2020-0912 | High | 7.0 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To exploit this vulnerabi… |
CVE-2020-0911 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who successfully exploited t… |
CVE-2020-0908 | High | 7.5 | 2020-09-11 | <p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vuln… |
CVE-2020-0904 | Medium | 6.5 | 2020-09-11 | <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest o… |
CVE-2020-0890 | Medium | 6.5 | 2020-09-11 | <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest o… |
CVE-2020-0886 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited t… |
CVE-2020-0878 | Medium | 4.2 | 2020-09-11 | <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way th… |
CVE-2020-0875 | Medium | 5.5 | 2020-09-11 | <p>An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerability could ob… |
CVE-2020-0870 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully ex… |
CVE-2020-0856 | Medium | 6.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who suc… |
CVE-2020-0839 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulner… |
CVE-2020-0838 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run proce… |
CVE-2020-0837 | Medium | 5.0 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An… |
CVE-2020-0836 | High | 7.5 | 2020-09-11 | <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability… |
CVE-2020-0805 | Medium | 5.3 | 2020-09-11 | <p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploi… |
CVE-2020-0790 | High | 7.8 | 2020-09-11 | <p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability coul… |
CVE-2020-0782 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successf… |
CVE-2020-0766 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, an attacker… |
CVE-2020-0761 | High | 8.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who succe… |
CVE-2020-0718 | High | 8.8 | 2020-09-11 | <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who succe… |
CVE-2020-0664 | Medium | 6.5 | 2020-09-11 | <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who suc… |
CVE-2020-0648 | High | 7.8 | 2020-09-11 | <p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.</p> <p>To exploit this vulnerability, an… |
CVE-2020-25276 | High | 7.3 | 2020-09-11 | An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is per… |
CVE-2020-15169 | Medium | 5.4 | 2020-09-11 | In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views th… |