CVEs

101,977 total · page 1497 of 2,040

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-0578	Intel Modular Server MFS2600KISPP Compute Module	Hig	0.57	8.8	0.01		Apr 15, 2020	Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2020-0577	Intel Modular Server MFS2600KISPP Compute Module	Hig	0.57	8.8	0.01		Apr 15, 2020	Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2020-0557	Intel PROSet/Wireless WiFi	Hig	0.51	7.8	0.00		Apr 15, 2020	Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-0547	Intel Data Center Migration Center Software	Hig	0.51	7.8	0.00		Apr 15, 2020	Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-8948	Sierrawireless Windows Mobile Broadband Driver Package (MBDP)	Hig	0.51	7.8	0.00		Apr 15, 2020	The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system…
CVE-2020-4272	IBM QRadar SIEM	Hig	0.57	8.8	0.03		Apr 15, 2020	IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server.…
CVE-2020-4270	IBM QRadar SIEM	Hig	0.51	7.8	0.00		Apr 15, 2020	IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.
CVE-2020-4269	IBM QRadar SIEM	Hig	0.49	7.5	0.02		Apr 15, 2020	IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845.
CVE-2020-11728	DAViCal DAViCal	Hig	0.49	7.5	0.02		Apr 15, 2020	An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.
CVE-2020-1094	Microsoft Windows Work Folder Service	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.
CVE-2020-1029	Microsoft Connected User Experiences and Telemetry Service	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942,…
CVE-2020-1027	Microsoft Windows Kernel	Hig	0.63	7.8	0.04	KEV	Apr 15, 2020	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVE-2020-1022	Microsoft Dynamics Business Central	Hig	0.53	8.0	0.07		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVE-2020-1020	Microsoft Windows	Hig	0.74	8.8	0.65	KEV	Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…
CVE-2020-1019	Microsoft RMS Sharing App for Mac	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'.
CVE-2020-1018	Microsoft Dynamics Business Central	Hig	0.49	7.5	0.06		Apr 15, 2020	An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information…
CVE-2020-1017	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006.
CVE-2020-1015	Microsoft Windows	Hig	0.51	7.8	0.03		Apr 15, 2020	An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
CVE-2020-1014	Microsoft Windows Update Client	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'.
CVE-2020-1011	Microsoft Windows System Assessment Tool	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015.
CVE-2020-1009	Microsoft Windows	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011,…
CVE-2020-1008	Microsoft Windows	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-1006	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017.
CVE-2020-1004	Microsoft Windows Graphics component	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.
CVE-2020-1003	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1027.
CVE-2020-1002	Microsoft Defender	Hig	0.46	7.1	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
CVE-2020-1001	Microsoft Windows Push Notification Service	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017.
CVE-2020-1000	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1003, CVE-2020-1027.
CVE-2020-0999	Microsoft Windows	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0996	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0985.
CVE-2020-0995	Microsoft Windows Jet Database Engine	Hig	0.52	7.8	0.17		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0994	Microsoft Windows	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0992	Microsoft Windows	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0991	Microsoft Office	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.
CVE-2020-0988	Microsoft Windows	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0985	Microsoft Windows Update Stack	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0996.
CVE-2020-0984	Microsoft AutoUpdate	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka 'Microsoft (MAU) Office Elevation of Privilege Vulnerability'.
CVE-2020-0983	Microsoft Windows Delivery Optimization	Hig	0.51	7.8	0.01		Apr 15, 2020	An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-1009, CVE-2020-1011, CVE-2020-1015.
CVE-2020-0981	Microsoft Windows	Hig	0.57	8.8	0.01		Apr 15, 2020	A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to…
CVE-2020-0980	Microsoft Word	Hig	0.52	7.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVE-2020-0979	Microsoft Excel	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0974	Microsoft Sharepoint Server	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0971	Microsoft Sharepoint Server	Hig	0.58	8.8	0.13		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0970	Microsoft Chakracore	Hig	0.43	7.5	0.13		Apr 15, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.
CVE-2020-0969	Microsoft Chakracore	Hig	0.43	7.5	0.13		Apr 15, 2020	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-0968	Microsoft Internet Explorer	Hig	0.63	7.5	0.30	KEV	Apr 15, 2020	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.
CVE-2020-0967	Microsoft VBScript engine	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.
CVE-2020-0966	Microsoft VBScript engine	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.
CVE-2020-0965	Microsoft Windows Codecs Library	Hig	0.51	7.8	0.02		Apr 15, 2020	A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.
CVE-2020-0964	Microsoft Windows Graphics Device Interface	Hig	0.59	8.8	0.17		Apr 15, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

CVE-2020-0578HigApr 15, 2020
Intel
Modular Server MFS2600KISPP Compute Module
risk 0.57cvss 8.8epss 0.01
Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2020-0577HigApr 15, 2020
Intel
Modular Server MFS2600KISPP Compute Module
risk 0.57cvss 8.8epss 0.01
Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2020-0557HigApr 15, 2020
Intel
PROSet/Wireless WiFi
risk 0.51cvss 7.8epss 0.00
Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-0547HigApr 15, 2020
Intel
Data Center Migration Center Software
risk 0.51cvss 7.8epss 0.00
Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-8948HigApr 15, 2020
Sierrawireless
Windows Mobile Broadband Driver Package (MBDP)
risk 0.51cvss 7.8epss 0.00
The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system…
CVE-2020-4272HigApr 15, 2020
IBM
QRadar SIEM
risk 0.57cvss 8.8epss 0.03
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable server.…
CVE-2020-4270HigApr 15, 2020
IBM
QRadar SIEM
risk 0.51cvss 7.8epss 0.00
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846.
CVE-2020-4269HigApr 15, 2020
IBM
QRadar SIEM
risk 0.49cvss 7.5epss 0.02
IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-ForceID: 175845.
CVE-2020-11728HigApr 15, 2020
DAViCal
DAViCal
risk 0.49cvss 7.5epss 0.02
An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who can guess the microsecond time (and the incrementing session_id) can impersonate a session.
CVE-2020-1094HigApr 15, 2020
Microsoft
Windows Work Folder Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.
CVE-2020-1029HigApr 15, 2020
Microsoft
Connected User Experiences and Telemetry Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942,…
CVE-2020-1027HigKEVApr 15, 2020
Microsoft
Windows Kernel
risk 0.63cvss 7.8epss 0.04
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVE-2020-1022HigApr 15, 2020
Microsoft
Dynamics Business Central
risk 0.53cvss 8.0epss 0.07
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVE-2020-1020HigKEVApr 15, 2020
Microsoft
Windows
risk 0.74cvss 8.8epss 0.65
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…
CVE-2020-1019HigApr 15, 2020
Microsoft
RMS Sharing App for Mac
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'.
CVE-2020-1018HigApr 15, 2020
Microsoft
Dynamics Business Central
risk 0.49cvss 7.5epss 0.06
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information…
CVE-2020-1017HigApr 15, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006.
CVE-2020-1015HigApr 15, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011.
CVE-2020-1014HigApr 15, 2020
Microsoft
Windows Update Client
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'.
CVE-2020-1011HigApr 15, 2020
Microsoft
Windows System Assessment Tool
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015.
CVE-2020-1009HigApr 15, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011,…
CVE-2020-1008HigApr 15, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-1006HigApr 15, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017.
CVE-2020-1004HigApr 15, 2020
Microsoft
Windows Graphics component
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.
CVE-2020-1003HigApr 15, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1027.
CVE-2020-1002HigApr 15, 2020
Microsoft
Defender
risk 0.46cvss 7.1epss 0.01
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
CVE-2020-1001HigApr 15, 2020
Microsoft
Windows Push Notification Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017.
CVE-2020-1000HigApr 15, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1003, CVE-2020-1027.
CVE-2020-0999HigApr 15, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0996HigApr 15, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0985.
CVE-2020-0995HigApr 15, 2020
Microsoft
Windows Jet Database Engine
risk 0.52cvss 7.8epss 0.17
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0994HigApr 15, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0992HigApr 15, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0991HigApr 15, 2020
Microsoft
Office
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.
CVE-2020-0988HigApr 15, 2020
Microsoft
Windows
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960,…
CVE-2020-0985HigApr 15, 2020
Microsoft
Windows Update Stack
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0996.
CVE-2020-0984HigApr 15, 2020
Microsoft
AutoUpdate
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka 'Microsoft (MAU) Office Elevation of Privilege Vulnerability'.
CVE-2020-0983HigApr 15, 2020
Microsoft
Windows Delivery Optimization
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-1009, CVE-2020-1011, CVE-2020-1015.
CVE-2020-0981HigApr 15, 2020
Microsoft
Windows
risk 0.57cvss 8.8epss 0.01
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to…
CVE-2020-0980HigApr 15, 2020
Microsoft
Word
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVE-2020-0979HigApr 15, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0974HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0971HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0970HigApr 15, 2020
Microsoft
Chakracore
risk 0.43cvss 7.5epss 0.13
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.
CVE-2020-0969HigApr 15, 2020
Microsoft
Chakracore
risk 0.43cvss 7.5epss 0.13
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
CVE-2020-0968HigKEVApr 15, 2020
Microsoft
Internet Explorer
risk 0.63cvss 7.5epss 0.30
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.
CVE-2020-0967HigApr 15, 2020
Microsoft
VBScript engine
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.
CVE-2020-0966HigApr 15, 2020
Microsoft
VBScript engine
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.
CVE-2020-0965HigApr 15, 2020
Microsoft
Windows Codecs Library
risk 0.51cvss 7.8epss 0.02
A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.
CVE-2020-0964HigApr 15, 2020
Microsoft
Windows Graphics Device Interface
risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.