CVEs

101,975 total · page 1458 of 2,040

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1463	Microsoft Windows SharedStream Library	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
CVE-2020-1461	Microsoft Defender	Hig	0.46	7.1	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
CVE-2020-1458	Microsoft Office	Hig	0.52	7.8	0.11	Jul 14, 2020	A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVE-2020-1449	Microsoft Project	Hig	0.51	7.8	0.05	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
CVE-2020-1448	Microsoft Word	Hig	0.58	8.8	0.10	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
CVE-2020-1447	Microsoft Word	Hig	0.58	8.8	0.11	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
CVE-2020-1446	Microsoft Word	Hig	0.58	8.8	0.11	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-1439	Microsoft Sharepoint Server	Hig	0.59	8.8	0.20	Jul 14, 2020	A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
CVE-2020-1438	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1437	Microsoft Windows Network Location Awareness Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.
CVE-2020-1436	Microsoft Windows Font Library	Hig	0.59	8.8	0.21	Jul 14, 2020	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code…
CVE-2020-1435	Microsoft Windows Graphics Device Interface	Hig	0.58	8.8	0.14	Jul 14, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1431	Microsoft Windows AppX Deployment Extensions	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to…
CVE-2020-1430	Microsoft Windows UPnP Device Host	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'.…
CVE-2020-1429	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-1428	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1427	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1424	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'.
CVE-2020-1423	Microsoft Windows Subsystem for Linux	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2020-1422	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1421	Microsoft Windows	Hig	0.63	8.8	0.74	Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-1418	Microsoft Windows Diagnostics Execution Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from…
CVE-2020-1416	Microsoft Visual Studio	Hig	0.58	8.8	0.06	Jul 14, 2020	An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2020-1415	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1414	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1413	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1412	Microsoft Microsoft Graphics Components	Hig	0.58	8.8	0.14	Jul 14, 2020	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVE-2020-1411	Microsoft Windows Kernel	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.
CVE-2020-1410	Microsoft Windows Address Book	Hig	0.52	7.8	0.12	Jul 14, 2020	A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book (WAB), aka 'Windows Address Book Remote Code…
CVE-2020-1409	Microsoft DirectWrite	Hig	0.52	7.8	0.12	Jul 14, 2020	A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
CVE-2020-1408	Microsoft Windows	Hig	0.58	8.8	0.06	Jul 14, 2020	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-1407	Microsoft Windows	Hig	0.52	7.8	0.11	Jul 14, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1401.
CVE-2020-1406	Microsoft Windows Network List Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-1405	Microsoft Windows Mobile Device Management Diagnostics	Hig	0.46	7.1	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372.
CVE-2020-1404	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413,…
CVE-2020-1403	Microsoft Vbscript	Hig	0.50	7.5	0.10	Jul 14, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
CVE-2020-1402	Microsoft Windows ActiveX Installer Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1401	Microsoft Windows Jet Database Engine	Hig	0.52	7.8	0.13	Jul 14, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1407.
CVE-2020-1400	Microsoft Windows	Hig	0.53	7.8	0.24	Jul 14, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.
CVE-2020-1399	Microsoft Windows Runtime	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395	Microsoft Windows Speech Brokered API	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394	Microsoft Windows Geolocation Framework	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393	Microsoft Diagnostics Hub Standard Collector Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392	Microsoft Windows Delivery Optimization	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390	Microsoft Windows Network Connections Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388	Microsoft Windows	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385	Microsoft Windows Credential Picker	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.
CVE-2020-1384	Microsoft Windows CNG Key Isolation Service	Hig	0.51	7.8	0.01	Jul 14, 2020	An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.

CVE-2020-1463HigJul 14, 2020
Microsoft
Windows SharedStream Library
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.
CVE-2020-1461HigJul 14, 2020
Microsoft
Defender
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
CVE-2020-1458HigJul 14, 2020
Microsoft
Office
risk 0.52cvss 7.8epss 0.11
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVE-2020-1449HigJul 14, 2020
Microsoft
Project
risk 0.51cvss 7.8epss 0.05
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
CVE-2020-1448HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
CVE-2020-1447HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
CVE-2020-1446HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-1439HigJul 14, 2020
Microsoft
Sharepoint Server
risk 0.59cvss 8.8epss 0.20
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'.
CVE-2020-1438HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1437HigJul 14, 2020
Microsoft
Windows Network Location Awareness Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.
CVE-2020-1436HigJul 14, 2020
Microsoft
Windows Font Library
risk 0.59cvss 8.8epss 0.21
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code…
CVE-2020-1435HigJul 14, 2020
Microsoft
Windows Graphics Device Interface
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1431HigJul 14, 2020
Microsoft
Windows AppX Deployment Extensions
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to…
CVE-2020-1430HigJul 14, 2020
Microsoft
Windows UPnP Device Host
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'.…
CVE-2020-1429HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-1428HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1427HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390,…
CVE-2020-1424HigJul 14, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'.
CVE-2020-1423HigJul 14, 2020
Microsoft
Windows Subsystem for Linux
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVE-2020-1422HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1421HigJul 14, 2020
Microsoft
Windows
risk 0.63cvss 8.8epss 0.74
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-1418HigJul 14, 2020
Microsoft
Windows Diagnostics Execution Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique from…
CVE-2020-1416HigJul 14, 2020
Microsoft
Visual Studio
risk 0.58cvss 8.8epss 0.06
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2020-1415HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1414HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1413HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404,…
CVE-2020-1412HigJul 14, 2020
Microsoft
Microsoft Graphics Components
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVE-2020-1411HigJul 14, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.
CVE-2020-1410HigJul 14, 2020
Microsoft
Windows Address Book
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book (WAB), aka 'Windows Address Book Remote Code…
CVE-2020-1409HigJul 14, 2020
Microsoft
DirectWrite
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
CVE-2020-1408HigJul 14, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.06
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-1407HigJul 14, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.11
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1401.
CVE-2020-1406HigJul 14, 2020
Microsoft
Windows Network List Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVE-2020-1405HigJul 14, 2020
Microsoft
Windows Mobile Device Management Diagnostics
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372.
CVE-2020-1404HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1413,…
CVE-2020-1403HigJul 14, 2020
Microsoft
Vbscript
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
CVE-2020-1402HigJul 14, 2020
Microsoft
Windows ActiveX Installer Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege…
CVE-2020-1401HigJul 14, 2020
Microsoft
Windows Jet Database Engine
risk 0.52cvss 7.8epss 0.13
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1400, CVE-2020-1407.
CVE-2020-1400HigJul 14, 2020
Microsoft
Windows
risk 0.53cvss 7.8epss 0.24
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.
CVE-2020-1399HigJul 14, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1404, CVE-2020-1413,…
CVE-2020-1396HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC…
CVE-2020-1395HigJul 14, 2020
Microsoft
Windows Speech Brokered API
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1394.
CVE-2020-1394HigJul 14, 2020
Microsoft
Windows Geolocation Framework
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1392, CVE-2020-1395.
CVE-2020-1393HigJul 14, 2020
Microsoft
Diagnostics Hub Standard Collector Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka 'Windows Diagnostics Hub Elevation of Privilege Vulnerability'. This CVE ID is unique…
CVE-2020-1392HigJul 14, 2020
Microsoft
Windows Delivery Optimization
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1390HigJul 14, 2020
Microsoft
Windows Network Connections Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1427,…
CVE-2020-1388HigJul 14, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392, CVE-2020-1394, CVE-2020-1395.
CVE-2020-1387HigJul 14, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
CVE-2020-1385HigJul 14, 2020
Microsoft
Windows Credential Picker
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.
CVE-2020-1384HigJul 14, 2020
Microsoft
Windows CNG Key Isolation Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1359.