2020 CVEs (page 127)
Page 127 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1431 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys… |
CVE-2020-1430 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would fir… |
CVE-2020-1429 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager El… |
CVE-2020-1428 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-1427 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-1426 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2020-1424 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of… |
CVE-2020-1423 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Pri… |
CVE-2020-1422 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1421 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successful… |
CVE-2020-1420 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would… |
CVE-2020-1419 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2020-1418 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-… |
CVE-2020-1416 | High | 8.8 | 2020-07-14 | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Stud… |
CVE-2020-1415 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1414 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1413 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1412 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote… |
CVE-2020-1411 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-1410 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could s… |
CVE-2020-1409 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. |
CVE-2020-1408 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote… |
CVE-2020-1407 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2020-1406 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service El… |
CVE-2020-1405 | High | 7.1 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device… |
CVE-2020-1404 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1403 | High | 7.5 | 2020-07-14 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. |
CVE-2020-1402 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker… |
CVE-2020-1401 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2020-1400 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2020-1399 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1398 | Medium | 6.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited th… |
CVE-2020-1397 | Medium | 6.5 | 2020-07-14 | An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging C… |
CVE-2020-1396 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully explo… |
CVE-2020-1395 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege V… |
CVE-2020-1394 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege… |
CVE-2020-1393 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unse… |
CVE-2020-1392 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of P… |
CVE-2020-1391 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in memory, aka 'Windows Agen… |
CVE-2020-1390 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-1389 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2020-1388 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. Th… |
CVE-2020-1387 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Servi… |
CVE-2020-1386 | Medium | 5.5 | 2020-07-14 | An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Ex… |
CVE-2020-1385 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevatio… |
CVE-2020-1384 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Window… |
CVE-2020-1382 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevat… |
CVE-2020-1381 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevat… |
CVE-2020-1375 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerabilit… |
CVE-2020-1374 | High | 7.5 | 2020-07-14 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote… |
CVE-2020-1373 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-1372 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobil… |
CVE-2020-1371 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker woul… |
CVE-2020-1370 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1369 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Pri… |
CVE-2020-1368 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Windows Credential Enr… |
CVE-2020-1367 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2020-1366 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Servic… |
CVE-2020-1365 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker woul… |
CVE-2020-1364 | High | 7.1 | 2020-07-14 | A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulnerability'. |
CVE-2020-1363 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would firs… |
CVE-2020-1362 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Pri… |
CVE-2020-1361 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code… |
CVE-2020-1360 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of P… |
CVE-2020-1359 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Window… |
CVE-2020-1358 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker… |
CVE-2020-1357 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elev… |
CVE-2020-1356 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elev… |
CVE-2020-1355 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerabili… |
CVE-2020-1354 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would fir… |
CVE-2020-1353 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1352 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would firs… |
CVE-2020-1351 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Info… |
CVE-2020-1350 | Critical | 10.0 | 2020-07-14 | A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote C… |
CVE-2020-1349 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Co… |
CVE-2020-1347 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of… |
CVE-2020-1346 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation… |
CVE-2020-1344 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Pri… |
CVE-2020-1342 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose… |
CVE-2020-1336 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnera… |
CVE-2020-1333 | Medium | 6.7 | 2020-07-14 | An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy… |
CVE-2020-1330 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device… |
CVE-2020-1326 | Medium | 5.4 | 2020-07-14 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site… |
CVE-2020-1267 | Medium | 4.9 | 2020-07-14 | This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a speci… |
CVE-2020-1249 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1240 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2020-1147 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of X… |
CVE-2020-1085 | High | 7.8 | 2020-07-14 | An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discover… |
CVE-2020-1043 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1042 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1041 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1040 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1036 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1032 | Critical | 9.0 | 2020-07-14 | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… |
CVE-2020-1025 | Critical | 9.8 | 2020-07-14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An atta… |
CVE-2020-15104 | Medium | 4.6 | 2020-07-14 | In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly allow a wildcard DNS Subject Alternative… |
CVE-2020-15101 | Low | 2.8 | 2020-07-14 | In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk()… |
CVE-2020-11084 | Medium | 6.4 | 2020-07-14 | In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are aff… |
CVE-2020-5246 | High | 7.7 | 2020-07-14 | Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing… |
CVE-2020-11083 | Low | 3.5 | 2020-07-14 | In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS… |