Vendor CVEs

Microsoft

All CVEs

16,667 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-1585	Microsoft Windows Codecs Library	Hig	0.58	8.8	0.05		Aug 17, 2020	A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or…
CVE-2020-1583	Microsoft Word	Hig	0.58	8.8	0.05		Aug 17, 2020	An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could…
CVE-2020-1561	Microsoft Microsoft Graphics Components	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open…
CVE-2020-1555	Microsoft Edge	Hig	0.58	8.8	0.05		Aug 17, 2020	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An…
CVE-2020-1504	Microsoft Excel	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1498	Microsoft Excel	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1496	Microsoft Excel	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1495	Microsoft Excel	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1494	Microsoft Excel	Hig	0.58	8.8	0.04		Aug 17, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1472	Microsoft Windows Server 2008	Med	0.58	5.5	0.99	KEV	Aug 17, 2020	An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially…
CVE-2020-1448	Microsoft Word	Hig	0.58	8.8	0.10		Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
CVE-2020-1447	Microsoft Word	Hig	0.58	8.8	0.11		Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
CVE-2020-1446	Microsoft Word	Hig	0.58	8.8	0.11		Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-1435	Microsoft Windows Graphics Device Interface	Hig	0.58	8.8	0.14		Jul 14, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1416	Microsoft Visual Studio	Hig	0.58	8.8	0.06		Jul 14, 2020	An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2020-1412	Microsoft Microsoft Graphics Components	Hig	0.58	8.8	0.14		Jul 14, 2020	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVE-2020-1408	Microsoft Windows	Hig	0.58	8.8	0.06		Jul 14, 2020	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-1240	Microsoft Excel	Hig	0.58	8.8	0.14		Jul 14, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2020-1321	Microsoft Office	Hig	0.58	8.8	0.12		Jun 9, 2020	A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVE-2020-1317	Microsoft Group Policy	Hig	0.58	8.8	0.04		Jun 9, 2020	An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
CVE-2020-1299	Microsoft Windows	Hig	0.58	8.8	0.14		Jun 9, 2020	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-1286	Microsoft Windows Shell	Hig	0.58	8.8	0.12		Jun 9, 2020	A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution…
CVE-2020-1281	Microsoft Windows	Hig	0.58	8.8	0.14		Jun 9, 2020	A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
CVE-2020-1248	Microsoft Windows Graphics Device Interface	Hig	0.58	8.8	0.14		Jun 9, 2020	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1239	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.06		Jun 9, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.
CVE-2020-1238	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.07		Jun 9, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239.
CVE-2020-1223	Microsoft Word	Hig	0.58	8.8	0.08		Jun 9, 2020	A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file.The update addresses the vulnerability by correcting…
CVE-2020-1171	Microsoft Python	Hig	0.58	8.8	0.05		May 21, 2020	A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current…
CVE-2020-1126	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.04		May 21, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1117	Microsoft Color Management Module	Hig	0.58	8.8	0.04		May 21, 2020	A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view,…
CVE-2020-1102	Microsoft Sharepoint Server	Hig	0.58	8.8	0.05		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-1069	Microsoft Sharepoint Server	Hig	0.58	8.8	0.04		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in…
CVE-2020-1024	Microsoft Sharepoint Server	Hig	0.58	8.8	0.04		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-1023	Microsoft Sharepoint Server	Hig	0.58	8.8	0.04		May 21, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-0979	Microsoft Excel	Hig	0.58	8.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0974	Microsoft Sharepoint Server	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0971	Microsoft Sharepoint Server	Hig	0.58	8.8	0.13		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0967	Microsoft VBScript engine	Hig	0.58	8.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.
CVE-2020-0966	Microsoft VBScript engine	Hig	0.58	8.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.
CVE-2020-0950	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.05		Apr 15, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.
CVE-2020-0949	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.05		Apr 15, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.
CVE-2020-0948	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.05		Apr 15, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.
CVE-2020-0931	Microsoft Sharepoint Server	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0929	Microsoft Sharepoint Server	Hig	0.58	8.8	0.11		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0931,…
CVE-2020-0920	Microsoft Sharepoint Server	Hig	0.58	8.8	0.10		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931,…
CVE-2020-0906	Microsoft Excel	Hig	0.58	8.8	0.12		Apr 15, 2020	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
CVE-2020-0760	Microsoft Office	Hig	0.58	8.8	0.09		Apr 15, 2020	A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
CVE-2020-0869	Microsoft Windows Media Foundation	Hig	0.58	8.8	0.05		Mar 12, 2020	A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
CVE-2020-0850	Microsoft Word	Hig	0.58	8.8	0.09		Mar 12, 2020	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVE-2020-0816	Microsoft Edge	Hig	0.58	8.8	0.11		Mar 12, 2020	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.

CVE-2020-1585HigAug 17, 2020
Microsoft
Windows Codecs Library
risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or…
CVE-2020-1583HigAug 17, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.05
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could…
CVE-2020-1561HigAug 17, 2020
Microsoft
Microsoft Graphics Components
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open…
CVE-2020-1555HigAug 17, 2020
Microsoft
Edge
risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An…
CVE-2020-1504HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1498HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1496HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1495HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1494HigAug 17, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
CVE-2020-1472MedKEVAug 17, 2020
Microsoft
Windows Server 2008
risk 0.58cvss 5.5epss 0.99
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially…
CVE-2020-1448HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
CVE-2020-1447HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
CVE-2020-1446HigJul 14, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-1435HigJul 14, 2020
Microsoft
Windows Graphics Device Interface
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1416HigJul 14, 2020
Microsoft
Visual Studio
risk 0.58cvss 8.8epss 0.06
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
CVE-2020-1412HigJul 14, 2020
Microsoft
Microsoft Graphics Components
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVE-2020-1408HigJul 14, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.06
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
CVE-2020-1240HigJul 14, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVE-2020-1321HigJun 9, 2020
Microsoft
Office
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVE-2020-1317HigJun 9, 2020
Microsoft
Group Policy
risk 0.58cvss 8.8epss 0.04
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
CVE-2020-1299HigJun 9, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution…
CVE-2020-1286HigJun 9, 2020
Microsoft
Windows Shell
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution…
CVE-2020-1281HigJun 9, 2020
Microsoft
Windows
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.
CVE-2020-1248HigJun 9, 2020
Microsoft
Windows Graphics Device Interface
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVE-2020-1239HigJun 9, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.06
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.
CVE-2020-1238HigJun 9, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.07
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1239.
CVE-2020-1223HigJun 9, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.08
A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file.The update addresses the vulnerability by correcting…
CVE-2020-1171HigMay 21, 2020
Microsoft
Python
risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current…
CVE-2020-1126HigMay 21, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.04
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are…
CVE-2020-1117HigMay 21, 2020
Microsoft
Color Management Module
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view,…
CVE-2020-1102HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-1069HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in…
CVE-2020-1024HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-1023HigMay 21, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool…
CVE-2020-0979HigApr 15, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVE-2020-0974HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0971HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.13
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0967HigApr 15, 2020
Microsoft
VBScript engine
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.
CVE-2020-0966HigApr 15, 2020
Microsoft
VBScript engine
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.
CVE-2020-0950HigApr 15, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.05
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.
CVE-2020-0949HigApr 15, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.05
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.
CVE-2020-0948HigApr 15, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.05
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.
CVE-2020-0931HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929,…
CVE-2020-0929HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0931,…
CVE-2020-0920HigApr 15, 2020
Microsoft
Sharepoint Server
risk 0.58cvss 8.8epss 0.10
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0929, CVE-2020-0931,…
CVE-2020-0906HigApr 15, 2020
Microsoft
Excel
risk 0.58cvss 8.8epss 0.12
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
CVE-2020-0760HigApr 15, 2020
Microsoft
Office
risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
CVE-2020-0869HigMar 12, 2020
Microsoft
Windows Media Foundation
risk 0.58cvss 8.8epss 0.05
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
CVE-2020-0850HigMar 12, 2020
Microsoft
Word
risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVE-2020-0816HigMar 12, 2020
Microsoft
Edge
risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.

Page 23 of 334