CVEs

408,441 total · page 5507 of 8,169

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-0723	Microsoft Win32K	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721,…
CVE-2020-0722	Microsoft Win32K	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721,…
CVE-2020-0721	Microsoft Win32K	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0722,…
CVE-2020-0720	Microsoft Win32K	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0719	Microsoft Windows	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0717	Microsoft Win32K	Med	0.36	5.5	0.01		Feb 11, 2020	An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0716.
CVE-2020-0716	Microsoft Win32K	Med	0.36	5.5	0.01		Feb 11, 2020	An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0717.
CVE-2020-0715	Microsoft Windows Graphics component	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745, CVE-2020-0792.
CVE-2020-0714	Microsoft Directx	Med	0.36	5.5	0.01		Feb 11, 2020	An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
CVE-2020-0713	Microsoft Chakracore	Hig	0.50	7.5	0.10		Feb 11, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0712	Microsoft Chakracore	Hig	0.43	7.5	0.10		Feb 11, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0713,…
CVE-2020-0711	Microsoft Chakracore	Hig	0.50	7.5	0.10		Feb 11, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0712, CVE-2020-0713,…
CVE-2020-0710	Microsoft Chakracore	Hig	0.50	7.5	0.10		Feb 11, 2020	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713,…
CVE-2020-0709	Microsoft Directx	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.
CVE-2020-0708	Microsoft Windows Imaging Library	Hig	0.52	7.8	0.14		Feb 11, 2020	A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting…
CVE-2020-0707	Microsoft Windows IME	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'.
CVE-2020-0706	Microsoft Browser	Med	0.28	4.3	0.05		Feb 11, 2020	An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.
CVE-2020-0705	Microsoft Windows Network Driver Interface Specification (NDIS)	Med	0.36	5.5	0.01		Feb 11, 2020	An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface…
CVE-2020-0704	Microsoft Windows Wireless Network Manager	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Wireless Network Manager Elevation of Privilege…
CVE-2020-0703	Microsoft Windows Backup Service	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'.
CVE-2020-0702	Microsoft Surface Hub	Med	0.44	6.8	0.01		Feb 11, 2020	A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'.
CVE-2020-0701	Microsoft Windows Client License Service	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'.
CVE-2020-0698	Microsoft Windows	Med	0.36	5.5	0.01		Feb 11, 2020	An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'.
CVE-2020-0697	Microsoft Office	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially…
CVE-2020-0696	Microsoft Outlook	Med	0.43	6.5	0.05		Feb 11, 2020	A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
CVE-2020-0695	Microsoft Office Online Server	Med	0.35	5.4	0.01		Feb 11, 2020	A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.
CVE-2020-0694	Microsoft Sharepoint Server	Med	0.35	5.4	0.02		Feb 11, 2020	A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693.
CVE-2020-0693	Microsoft Sharepoint Server	Med	0.35	5.4	0.02		Feb 11, 2020	A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694.
CVE-2020-0692	Microsoft Exchange Server	Hig	0.53	8.1	0.03		Feb 11, 2020	An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
CVE-2020-0691	Microsoft Windows	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0689	Microsoft Secure Boot	Med	0.44	6.7	0.01		Feb 11, 2020	A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.
CVE-2020-0688	Microsoft Exchange Server	Hig	0.86	8.8	1.00	KEV	Feb 11, 2020	A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVE-2020-0686	Microsoft Windows Installer	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0683.
CVE-2020-0685	Microsoft Windows	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
CVE-2020-0683	Microsoft Windows Installer	Hig	0.66	7.8	0.08	KEV	Feb 11, 2020	An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
CVE-2020-0682	Microsoft Windows Function Discovery Service	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0680.
CVE-2020-0681	Microsoft Windows Remote Desktop	Hig	0.50	7.5	0.11		Feb 11, 2020	A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
CVE-2020-0680	Microsoft Windows Function Discovery Service	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0682.
CVE-2020-0679	Microsoft Windows Function Discovery Service	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682.
CVE-2020-0678	Microsoft Windows Error Reporting	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-0677	Microsoft Cryptography Next Generation	Med	0.36	5.5	0.02		Feb 11, 2020	An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0676	Microsoft Windows	Med	0.36	5.5	0.02		Feb 11, 2020	An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0675	Microsoft Cryptography Next Generation	Med	0.36	5.5	0.02		Feb 11, 2020	An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0674	Microsoft Internet Explorer	Hig	0.71	7.5	0.87	KEV	Feb 11, 2020	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0673	Microsoft Internet Explorer	Hig	0.50	7.5	0.10		Feb 11, 2020	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0672	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0671.
CVE-2020-0671	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0672.
CVE-2020-0670	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672.
CVE-2020-0669	Microsoft Windows Kernel	Hig	0.51	7.8	0.01		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
CVE-2020-0668	Microsoft Windows Kernel	Hig	0.56	7.8	0.26		Feb 11, 2020	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.

CVE-2020-0723HigFeb 11, 2020
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721,…
CVE-2020-0722HigFeb 11, 2020
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721,…
CVE-2020-0721HigFeb 11, 2020
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0722,…
CVE-2020-0720HigFeb 11, 2020
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0719HigFeb 11, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0717MedFeb 11, 2020
Microsoft
Win32K
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0716.
CVE-2020-0716MedFeb 11, 2020
Microsoft
Win32K
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0717.
CVE-2020-0715HigFeb 11, 2020
Microsoft
Windows Graphics component
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745, CVE-2020-0792.
CVE-2020-0714MedFeb 11, 2020
Microsoft
Directx
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
CVE-2020-0713HigFeb 11, 2020
Microsoft
Chakracore
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0712HigFeb 11, 2020
Microsoft
Chakracore
risk 0.43cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0713,…
CVE-2020-0711HigFeb 11, 2020
Microsoft
Chakracore
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0712, CVE-2020-0713,…
CVE-2020-0710HigFeb 11, 2020
Microsoft
Chakracore
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713,…
CVE-2020-0709HigFeb 11, 2020
Microsoft
Directx
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.
CVE-2020-0708HigFeb 11, 2020
Microsoft
Windows Imaging Library
risk 0.52cvss 7.8epss 0.14
A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting…
CVE-2020-0707HigFeb 11, 2020
Microsoft
Windows IME
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'.
CVE-2020-0706MedFeb 11, 2020
Microsoft
Browser
risk 0.28cvss 4.3epss 0.05
An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.
CVE-2020-0705MedFeb 11, 2020
Microsoft
Windows Network Driver Interface Specification (NDIS)
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface…
CVE-2020-0704HigFeb 11, 2020
Microsoft
Windows Wireless Network Manager
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Wireless Network Manager Elevation of Privilege…
CVE-2020-0703HigFeb 11, 2020
Microsoft
Windows Backup Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'.
CVE-2020-0702MedFeb 11, 2020
Microsoft
Surface Hub
risk 0.44cvss 6.8epss 0.01
A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'.
CVE-2020-0701HigFeb 11, 2020
Microsoft
Windows Client License Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'.
CVE-2020-0698MedFeb 11, 2020
Microsoft
Windows
risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'.
CVE-2020-0697HigFeb 11, 2020
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially…
CVE-2020-0696MedFeb 11, 2020
Microsoft
Outlook
risk 0.43cvss 6.5epss 0.05
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
CVE-2020-0695MedFeb 11, 2020
Microsoft
Office Online Server
risk 0.35cvss 5.4epss 0.01
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.
CVE-2020-0694MedFeb 11, 2020
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693.
CVE-2020-0693MedFeb 11, 2020
Microsoft
Sharepoint Server
risk 0.35cvss 5.4epss 0.02
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694.
CVE-2020-0692HigFeb 11, 2020
Microsoft
Exchange Server
risk 0.53cvss 8.1epss 0.03
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
CVE-2020-0691HigFeb 11, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722,…
CVE-2020-0689MedFeb 11, 2020
Microsoft
Secure Boot
risk 0.44cvss 6.7epss 0.01
A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.
CVE-2020-0688HigKEVFeb 11, 2020
Microsoft
Exchange Server
risk 0.86cvss 8.8epss 1.00
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVE-2020-0686HigFeb 11, 2020
Microsoft
Windows Installer
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0683.
CVE-2020-0685HigFeb 11, 2020
Microsoft
Windows
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
CVE-2020-0683HigKEVFeb 11, 2020
Microsoft
Windows Installer
risk 0.66cvss 7.8epss 0.08
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
CVE-2020-0682HigFeb 11, 2020
Microsoft
Windows Function Discovery Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0680.
CVE-2020-0681HigFeb 11, 2020
Microsoft
Windows Remote Desktop
risk 0.50cvss 7.5epss 0.11
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.
CVE-2020-0680HigFeb 11, 2020
Microsoft
Windows Function Discovery Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0682.
CVE-2020-0679HigFeb 11, 2020
Microsoft
Windows Function Discovery Service
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682.
CVE-2020-0678HigFeb 11, 2020
Microsoft
Windows Error Reporting
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVE-2020-0677MedFeb 11, 2020
Microsoft
Cryptography Next Generation
risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0676MedFeb 11, 2020
Microsoft
Windows
risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0675MedFeb 11, 2020
Microsoft
Cryptography Next Generation
risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The…
CVE-2020-0674HigKEVFeb 11, 2020
Microsoft
Internet Explorer
risk 0.71cvss 7.5epss 0.87
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0673HigFeb 11, 2020
Microsoft
Internet Explorer
risk 0.50cvss 7.5epss 0.10
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712,…
CVE-2020-0672HigFeb 11, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0671.
CVE-2020-0671HigFeb 11, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0672.
CVE-2020-0670HigFeb 11, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672.
CVE-2020-0669HigFeb 11, 2020
Microsoft
Windows Kernel
risk 0.51cvss 7.8epss 0.01
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
CVE-2020-0668HigFeb 11, 2020
Microsoft
Windows Kernel
risk 0.56cvss 7.8epss 0.26
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.