Browse CVEs

MEDIUM 6.5 CVE-2020-0856 <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attack… Windows Server 2008 Patch available Fix from $1,6002020-09-11 MEDIUM 6.5 CVE-2020-0890 <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 6.5 CVE-2020-0904 <p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.5 CVE-2020-0875 <p>An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerabilit… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.5 CVE-2020-0914 <p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who suc… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.5 CVE-2020-0921 Microsoft Graphics Component Denial of Service Vulnerability Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.5 CVE-2020-0928 <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploite… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.5 CVE-2020-0941 <p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully expl… Windows 10 Patch available Fix from $1,6002020-09-11 MEDIUM 5.0 CVE-2020-0837 <p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication req… Windows 10 Patch available Fix from $1,6002020-09-11 HIGH 8.8 CVE-2020-0718 <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker… Windows Server 2008 Patch available Fix from $1,9502020-09-11 HIGH 8.8 CVE-2020-0761 <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker… Windows Server 2008 Patch available Fix from $1,9502020-09-11 HIGH 7.8 CVE-2020-0648 <p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.</p> <p>To exploit this vulnera… Windows 10 Patch available Fix from $1,9502020-09-11 HIGH 7.8 CVE-2020-0766 <p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, a… Windows 10 Patch available Fix from $1,9502020-09-11 HIGH 7.8 CVE-2020-0782 <p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker wh… Windows 10 Patch available Fix from $1,9502020-09-11 HIGH 7.8 CVE-2020-0790 <p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerab… Windows 10 Patch available Fix from $1,9502020-09-11 HIGH 7.5 CVE-2020-0836EPSS 5% <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vuln… Windows Server 2008 Patch available Fix from $1,9502020-09-11 MEDIUM 6.5 CVE-2020-0664 <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attack… Windows Server 2008 Patch available Fix from $1,6002020-09-11 MEDIUM 5.3 CVE-2020-0805 <p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfu… Windows 10 Patch available Fix from $1,6002020-09-11 HIGH 8.8 CVE-2020-1583 An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vul… 365 Apps Patch available Fix from $1,9502020-08-17 HIGH 8.8 CVE-2020-1585 A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1577EPSS 7% An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploit… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1579 An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerabi… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1581 An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker w… 365 Apps Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1582 A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker w… 365 Apps Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1584 An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1587 An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vuln… Windows 10 Patch available Fix from $1,9502020-08-17 MEDIUM 5.5 CVE-2020-1573 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Designer Patch available Fix from $1,6002020-08-17 MEDIUM 5.5 CVE-2020-1574 A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully… Windows 10 Patch available Fix from $1,6002020-08-17 MEDIUM 5.4 CVE-2020-1580 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-08-17 MEDIUM 5.4 CVE-2020-1591 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a… Dynamics 365 Patch available Fix from $1,6002020-08-17