2020 CVEs (page 176)
Page 176 of 194 — CVEs published in 2020, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0893 | Medium | 5.4 | 2020-03-12 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2020-0892 | High | 7.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0891 | Medium | 5.4 | 2020-03-12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated at… |
CVE-2020-0887 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2020-0885 | Medium | 4.3 | 2020-03-12 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component… |
CVE-2020-0884 | Low | 3.7 | 2020-03-12 | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnera… |
CVE-2020-0883 | High | 8.8 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E… |
CVE-2020-0882 | Medium | 6.5 | 2020-03-12 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2020-0881 | High | 8.8 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E… |
CVE-2020-0880 | Medium | 6.5 | 2020-03-12 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2020-0879 | Medium | 5.5 | 2020-03-12 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r… |
CVE-2020-0877 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2020-0876 | High | 7.5 | 2020-03-12 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili… |
CVE-2020-0874 | Medium | 5.5 | 2020-03-12 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r… |
CVE-2020-0872 | Critical | 9.6 | 2020-03-12 | A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party… |
CVE-2020-0871 | Medium | 5.5 | 2020-03-12 | An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connec… |
CVE-2020-0869 | High | 8.8 | 2020-03-12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-0868 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrato… |
CVE-2020-0867 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrato… |
CVE-2020-0866 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0865 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0864 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0863 | Medium | 5.5 | 2020-03-12 | An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Ex… |
CVE-2020-0861 | High | 7.8 | 2020-03-12 | An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnera… |
CVE-2020-0860 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker… |
CVE-2020-0859 | Medium | 5.5 | 2020-03-12 | An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Inform… |
CVE-2020-0858 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability… |
CVE-2020-0857 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of P… |
CVE-2020-0855 | High | 7.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0854 | High | 7.1 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device… |
CVE-2020-0853 | Medium | 6.5 | 2020-03-12 | An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging C… |
CVE-2020-0852 | High | 7.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0851 | High | 7.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0850 | High | 8.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0849 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This C… |
CVE-2020-0848 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0847 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. |
CVE-2020-0845 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-0844 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Ex… |
CVE-2020-0843 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the v… |
CVE-2020-0842 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the v… |
CVE-2020-0841 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This C… |
CVE-2020-0840 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This C… |
CVE-2020-0834 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully explo… |
CVE-2020-0833 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2020-0832 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2020-0831 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0830 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
CVE-2020-0829 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0828 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0827 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0826 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0825 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0824 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerabili… |
CVE-2020-0823 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0822 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installe… |
CVE-2020-0820 | Medium | 5.5 | 2020-03-12 | An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnera… |
CVE-2020-0819 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device Setup Manager Elev… |
CVE-2020-0816 | High | 8.8 | 2020-03-12 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
CVE-2020-0815 | High | 7.5 | 2020-03-12 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps S… |
CVE-2020-0814 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the v… |
CVE-2020-0813 | High | 7.5 | 2020-03-12 | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
CVE-2020-0812 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
CVE-2020-0811 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
CVE-2020-0810 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbi… |
CVE-2020-0809 | High | 8.8 | 2020-03-12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-0808 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Pr… |
CVE-2020-0807 | High | 8.8 | 2020-03-12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-0806 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of… |
CVE-2020-0804 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-0803 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-0802 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-0801 | High | 8.8 | 2020-03-12 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil… |
CVE-2020-0800 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0799 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka 'Wi… |
CVE-2020-0798 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure libr… |
CVE-2020-0797 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0796 | Critical | 10.0 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
CVE-2020-0795 | Medium | 5.4 | 2020-03-12 | This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated at… |
CVE-2020-0793 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Sta… |
CVE-2020-0791 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevat… |
CVE-2020-0789 | High | 7.1 | 2020-03-12 | A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Install… |
CVE-2020-0788 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2020-0787 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows… |
CVE-2020-0786 | High | 7.1 | 2020-03-12 | A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object Service Denial of Service… |
CVE-2020-0785 | High | 7.1 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service E… |
CVE-2020-0783 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP… |
CVE-2020-0781 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP… |
CVE-2020-0780 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service El… |
CVE-2020-0779 | Medium | 5.5 | 2020-03-12 | An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege… |
CVE-2020-0778 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti… |
CVE-2020-0777 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevat… |
CVE-2020-0776 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability, an att… |
CVE-2020-0775 | Medium | 5.5 | 2020-03-12 | An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would… |
CVE-2020-0774 | Medium | 6.5 | 2020-03-12 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2020-0773 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker… |
CVE-2020-0772 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first ha… |
CVE-2020-0771 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first ha… |
CVE-2020-0770 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker… |
CVE-2020-0769 | High | 7.8 | 2020-03-12 | An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first ha… |