2020 CVEs (page 142)
Page 142 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1265 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1264 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-1263 | Medium | 5.5 | 2020-06-09 | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Dis… |
CVE-2020-1262 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-1261 | Medium | 5.5 | 2020-06-09 | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Dis… |
CVE-2020-1260 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1259 | Medium | 4.3 | 2020-06-09 | A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Ser… |
CVE-2020-1258 | Medium | 6.7 | 2020-06-09 | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. |
CVE-2020-1257 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Sta… |
CVE-2020-1255 | High | 8.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content… |
CVE-2020-1254 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker… |
CVE-2020-1253 | Medium | 6.7 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-1251 | Medium | 6.7 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-1248 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E… |
CVE-2020-1247 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-1246 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-1244 | High | 7.1 | 2020-06-09 | A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experien… |
CVE-2020-1242 | Medium | 5.3 | 2020-06-09 | An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnera… |
CVE-2020-1241 | High | 7.8 | 2020-06-09 | A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authen… |
CVE-2020-1239 | High | 8.8 | 2020-06-09 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-1238 | High | 8.8 | 2020-06-09 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-1237 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnera… |
CVE-2020-1236 | High | 7.8 | 2020-06-09 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2020-1235 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1234 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker wou… |
CVE-2020-1233 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1232 | Medium | 6.5 | 2020-06-09 | An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnera… |
CVE-2020-1231 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne… |
CVE-2020-1230 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1229 | Medium | 4.3 | 2020-06-09 | A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlo… |
CVE-2020-1226 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2020-1225 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2020-1223 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker w… |
CVE-2020-1222 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would firs… |
CVE-2020-1220 | Medium | 6.1 | 2020-06-09 | A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based)… |
CVE-2020-1219 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
CVE-2020-1217 | High | 7.8 | 2020-06-09 | An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulne… |
CVE-2020-1216 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1215 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1214 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1213 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2020-1212 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would firs… |
CVE-2020-1211 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platfor… |
CVE-2020-1209 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service El… |
CVE-2020-1208 | High | 7.8 | 2020-06-09 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2020-1207 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… |
CVE-2020-1206 | High | 7.5 | 2020-06-09 | An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows… |
CVE-2020-1204 | High | 7.1 | 2020-06-09 | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device… |
CVE-2020-1203 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle obje… |
CVE-2020-1202 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle obje… |
CVE-2020-1201 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session M… |
CVE-2020-1199 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privi… |
CVE-2020-1197 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager El… |
CVE-2020-1196 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Pri… |
CVE-2020-1194 | Medium | 5.5 | 2020-06-09 | A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'. |
CVE-2020-1183 | Medium | 5.4 | 2020-06-09 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2020-1181 | High | 8.8 | 2020-06-09 | A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Mic… |
CVE-2020-1178 | High | 8.8 | 2020-06-09 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an aff… |
CVE-2020-1177 | Medium | 5.4 | 2020-06-09 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2020-1170 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker w… |
CVE-2020-1163 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker w… |
CVE-2020-1162 | High | 7.8 | 2020-06-09 | An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnera… |
CVE-2020-1160 | Medium | 5.5 | 2020-06-09 | An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Comp… |
CVE-2020-1148 | Medium | 5.4 | 2020-06-09 | A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, a… |
CVE-2020-1120 | Medium | 5.5 | 2020-06-09 | A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experien… |
CVE-2020-1073 | High | 8.1 | 2020-06-09 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0986 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2020-0916 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevatio… |
CVE-2020-0915 | High | 7.8 | 2020-06-09 | An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevatio… |
CVE-2020-7456 | Medium | 6.8 | 2020-06-09 | In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory l… |
CVE-2020-6265 | Critical | 9.8 | 2020-06-09 | SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication… |
CVE-2020-13911 | Medium | 5.4 | 2020-06-09 | Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. |
CVE-2020-13872 | High | 8.8 | 2020-06-09 | Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. |
CVE-2020-11957 | High | 7.5 | 2020-06-09 | The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Random) with signific… |
CVE-2020-13892 | Medium | 5.4 | 2020-06-09 | The SportsPress plugin before 2.7.2 for WordPress allows XSS. |
CVE-2020-12004 | High | 7.5 | 2020-06-09 | The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (vers… |
CVE-2020-12000 | High | 7.5 | 2020-06-09 | The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can re… |
CVE-2020-10644 | High | 7.5 | 2020-06-09 | The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions p… |
CVE-2020-9858 | High | 7.8 | 2020-06-09 | A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the i… |
CVE-2020-9856 | Medium | 5.3 | 2020-06-09 | This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able to gain elevated privileges. |
CVE-2020-9855 | High | 7.8 | 2020-06-09 | A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10… |
CVE-2020-9852 | High | 7.8 | 2020-06-09 | An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watc… |
CVE-2020-9851 | Medium | 5.5 | 2020-06-09 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to modify p… |
CVE-2020-9850 | Critical | 9.8 | 2020-06-09 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.1… |
CVE-2020-9848 | Low | 2.4 | 2020-06-09 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS d… |
CVE-2020-9847 | High | 8.6 | 2020-06-09 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break… |
CVE-2020-9844 | High | 7.5 | 2020-06-09 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker m… |
CVE-2020-9843 | High | 7.1 | 2020-06-09 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13… |
CVE-2020-9842 | High | 7.1 | 2020-06-09 | An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS… |
CVE-2020-9841 | High | 7.8 | 2020-06-09 | An integer overflow was addressed through improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbit… |
CVE-2020-9839 | High | 7.0 | 2020-06-09 | A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2… |
CVE-2020-9838 | Critical | 9.8 | 2020-06-09 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbi… |
CVE-2020-9837 | High | 7.5 | 2020-06-09 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remo… |
CVE-2020-9835 | Medium | 5.3 | 2020-06-09 | An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 13.5 and iPadOS 13.5. A user’s video… |
CVE-2020-9834 | High | 7.8 | 2020-06-09 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute ar… |
CVE-2020-9833 | Medium | 5.5 | 2020-06-09 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5. A local user may be able to read kern… |
CVE-2020-9832 | Medium | 5.5 | 2020-06-09 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to deter… |
CVE-2020-9831 | Medium | 5.5 | 2020-06-09 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determ… |
CVE-2020-9830 | High | 7.8 | 2020-06-09 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. An application… |
CVE-2020-9829 | Medium | 6.5 | 2020-06-09 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5. Processing a ma… |