CVEs

101,977 total · page 1481 of 2,040

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-1124	Microsoft Windows State Repository Service	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131, CVE-2020-1134, CVE-2020-1144,…
CVE-2020-1121	Microsoft Windows	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111, CVE-2020-1165, CVE-2020-1166.
CVE-2020-1118	Microsoft Windows	Hig	0.50	7.5	0.16		May 21, 2020	A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.
CVE-2020-1117	Microsoft Color Management Module	Hig	0.58	8.8	0.11		May 21, 2020	A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'.
CVE-2020-1114	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.
CVE-2020-1113	Microsoft Windows	Hig	0.49	7.5	0.07		May 21, 2020	A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.
CVE-2020-1111	Microsoft Windows	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1121, CVE-2020-1165, CVE-2020-1166.
CVE-2020-1110	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1109.
CVE-2020-1109	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1110.
CVE-2020-1108	Microsoft .net Framework	Hig	0.50	7.5	0.12		May 21, 2020	A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
CVE-2020-1102	Microsoft Sharepoint Server	Hig	0.58	8.8	0.15		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024.
CVE-2020-1096	Microsoft Edge PDF Reader	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
CVE-2020-1093	Microsoft VBScript engine	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1060.
CVE-2020-1092	Microsoft Internet Explorer	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.
CVE-2020-1090	Microsoft Windows Runtime	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1088	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1082.
CVE-2020-1087	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1114.
CVE-2020-1086	Microsoft Windows Runtime	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1082	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1088.
CVE-2020-1081	Microsoft Windows	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.
CVE-2020-1079	Microsoft Windows	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010, CVE-2020-1068.
CVE-2020-1078	Microsoft Windows Installer	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of…
CVE-2020-1077	Microsoft Windows Runtime	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1070	Microsoft Windows Print Spooler	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1048.
CVE-2020-1069	Microsoft Sharepoint Server	Hig	0.58	8.8	0.10		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
CVE-2020-1068	Microsoft Windows	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-1067	Microsoft Windows	Hig	0.58	8.8	0.09		May 21, 2020	A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.
CVE-2020-1066	Microsoft .net Framework	Hig	0.51	7.8	0.02		May 21, 2020	An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the…
CVE-2020-1065	Microsoft Chakracore	Hig	0.42	7.5	0.08		May 21, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-1064	Microsoft MSHTML Engine	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.
CVE-2020-1062	Microsoft Internet Explorer	Hig	0.50	7.5	0.14		May 21, 2020	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092.
CVE-2020-1061	Microsoft Script Runtime	Hig	0.58	8.8	0.11		May 21, 2020	A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.
CVE-2020-1060	Microsoft VBScript engine	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.
CVE-2020-1058	Microsoft VBScript engine	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.
CVE-2020-1056	Microsoft Edge	Hig	0.53	8.1	0.03		May 21, 2020	An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a…
CVE-2020-1054	Microsoft Windows	Hig	0.70	7.8	0.53	KEV	May 21, 2020	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.
CVE-2020-1051	Microsoft Windows Jet Database Engine	Hig	0.52	7.8	0.11		May 21, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174, CVE-2020-1175, CVE-2020-1176.
CVE-2020-1048	Microsoft Windows Print Spooler	Hig	0.55	7.8	0.17		May 21, 2020	An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
CVE-2020-1037	Microsoft Chakracore	Hig	0.42	7.5	0.08		May 21, 2020	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-1035	Microsoft VBScript engine	Hig	0.49	7.5	0.07		May 21, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093.
CVE-2020-1028	Microsoft Windows Media Foundation	Hig	0.51	7.8	0.05		May 21, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150.
CVE-2020-1024	Microsoft Sharepoint Server	Hig	0.58	8.8	0.10		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1102.
CVE-2020-1023	Microsoft Sharepoint Server	Hig	0.58	8.8	0.10		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1024, CVE-2020-1102.
CVE-2020-1021	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1082, CVE-2020-1088.
CVE-2020-1010	Microsoft Windows Block Level Backup Engine Service	Hig	0.51	7.8	0.01		May 21, 2020	An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of…
CVE-2020-12693	Schedmd Slurm	Hig	0.53	8.1	0.02		May 21, 2020	Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.
CVE-2020-0909	Microsoft Windows Hyper-V	Hig	0.49	7.5	0.04		May 21, 2020	A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the…
CVE-2019-20804	Gila Gila	Hig	0.57	8.8	0.01		May 21, 2020	Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.
CVE-2017-18868	Digi International Inc XBee 2	Hig	0.50	7.7	0.01		May 21, 2020	Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.
CVE-2020-7808	Raonwiz K Upload	Hig	0.57	8.7	0.01		May 21, 2020	In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.

CVE-2020-1124HigMay 21, 2020
Microsoft
Windows State Repository Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131, CVE-2020-1134, CVE-2020-1144,…
CVE-2020-1121HigMay 21, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111, CVE-2020-1165, CVE-2020-1166.
CVE-2020-1118HigMay 21, 2020
Microsoft
Windows
risk 0.50cvss 7.5epss 0.16
A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges, aka 'Microsoft Windows Transport Layer Security Denial of Service Vulnerability'.
CVE-2020-1117HigMay 21, 2020
Microsoft
Color Management Module
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'.
CVE-2020-1114HigMay 21, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.
CVE-2020-1113HigMay 21, 2020
Microsoft
Windows
risk 0.49cvss 7.5epss 0.07
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.
CVE-2020-1111HigMay 21, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1121, CVE-2020-1165, CVE-2020-1166.
CVE-2020-1110HigMay 21, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1109.
CVE-2020-1109HigMay 21, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1110.
CVE-2020-1108HigMay 21, 2020
Microsoft
.net Framework
risk 0.50cvss 7.5epss 0.12
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
CVE-2020-1102HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.15
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024.
CVE-2020-1096HigMay 21, 2020
Microsoft
Edge PDF Reader
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
CVE-2020-1093HigMay 21, 2020
Microsoft
VBScript engine
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1060.
CVE-2020-1092HigMay 21, 2020
Microsoft
Internet Explorer
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1062.
CVE-2020-1090HigMay 21, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1088HigMay 21, 2020
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1082.
CVE-2020-1087HigMay 21, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1114.
CVE-2020-1086HigMay 21, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1082HigMay 21, 2020
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021, CVE-2020-1088.
CVE-2020-1081HigMay 21, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.
CVE-2020-1079HigMay 21, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010, CVE-2020-1068.
CVE-2020-1078HigMay 21, 2020
Microsoft
Windows Installer
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of…
CVE-2020-1077HigMay 21, 2020
Microsoft
Windows Runtime
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149,…
CVE-2020-1070HigMay 21, 2020
Microsoft
Windows Print Spooler
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1048.
CVE-2020-1069HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
CVE-2020-1068HigMay 21, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID…
CVE-2020-1067HigMay 21, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.
CVE-2020-1066HigMay 21, 2020
Microsoft
.net Framework
risk 0.51cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the…
CVE-2020-1065HigMay 21, 2020
Microsoft
Chakracore
risk 0.42cvss 7.5epss 0.08
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-1064HigMay 21, 2020
Microsoft
MSHTML Engine
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.
CVE-2020-1062HigMay 21, 2020
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.14
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1092.
CVE-2020-1061HigMay 21, 2020
Microsoft
Script Runtime
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.
CVE-2020-1060HigMay 21, 2020
Microsoft
VBScript engine
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.
CVE-2020-1058HigMay 21, 2020
Microsoft
VBScript engine
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.
CVE-2020-1056HigMay 21, 2020
Microsoft
Edge
risk 0.53cvss 8.1epss 0.03
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a…
CVE-2020-1054HigKEVMay 21, 2020
Microsoft
Windows
risk 0.70cvss 7.8epss 0.53
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.
CVE-2020-1051HigMay 21, 2020
Microsoft
Windows Jet Database Engine
risk 0.52cvss 7.8epss 0.11
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174, CVE-2020-1175, CVE-2020-1176.
CVE-2020-1048HigMay 21, 2020
Microsoft
Windows Print Spooler
risk 0.55cvss 7.8epss 0.17
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
CVE-2020-1037HigMay 21, 2020
Microsoft
Chakracore
risk 0.42cvss 7.5epss 0.08
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-1035HigMay 21, 2020
Microsoft
VBScript engine
risk 0.49cvss 7.5epss 0.07
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093.
CVE-2020-1028HigMay 21, 2020
Microsoft
Windows Media Foundation
risk 0.51cvss 7.8epss 0.05
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150.
CVE-2020-1024HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1102.
CVE-2020-1023HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1024, CVE-2020-1102.
CVE-2020-1021HigMay 21, 2020
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1082, CVE-2020-1088.
CVE-2020-1010HigMay 21, 2020
Microsoft
Windows Block Level Backup Engine Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of…
CVE-2020-12693HigMay 21, 2020
Schedmd
Slurm
risk 0.53cvss 8.1epss 0.02
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.
CVE-2020-0909HigMay 21, 2020
Microsoft
Windows Hyper-V
risk 0.49cvss 7.5epss 0.04
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the…
CVE-2019-20804HigMay 21, 2020
Gila
Gila
risk 0.57cvss 8.8epss 0.01
Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.
CVE-2017-18868HigMay 21, 2020
Digi International Inc
XBee 2
risk 0.50cvss 7.7epss 0.01
Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.
CVE-2020-7808HigMay 21, 2020
Raonwiz
K Upload
risk 0.57cvss 8.7epss 0.01
In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.