Browse CVEs

HIGH 7.8 CVE-2020-1339 A remote code execution vulnerability exists when Windows Media Audio Codec improperly handles objects. An attacker who successfully exploited the vu… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1377 An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfull… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1380 KEVEPSS 24% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability c… Internet Explorer Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1464 KEVEPSS 41% A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could b… Windows 10 1507 Patch available Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1466 A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and … Windows Server 2012 Patch available Fix from $1,9502020-08-17 HIGH 7.5 CVE-2020-1378 An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfull… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.5 CVE-2020-1459 An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka… Windows 10 Patch available Fix from $1,9502020-08-17 HIGH 7.3 CVE-2020-1182 A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who succ… Dynamics 365 For Finance And Operations Patch available Fix from $1,9502020-08-17 MEDIUM 5.5 CVE-2020-1379 A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited t… Windows 10 Patch available Fix from $1,6002020-08-17 MEDIUM 5.5 CVE-2020-1383 An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited thi… Windows 10 Patch available Fix from $1,6002020-08-17 MEDIUM 5.5 CVE-2020-1417 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully explo… Windows 10 Patch available Fix from $1,6002020-08-17 MEDIUM 5.3 CVE-2020-1455 A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the v… Sql Server Management Studio 18.6+ Fix from $1,6002020-08-17 HIGH 7.8 CVE-2020-0604 A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who suc… Visual Studio Code 0.24.0+ Fix from $1,9502020-08-17 HIGH 7.8 CVE-2020-1425EPSS 9% A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Code… Windows 10 Patch available Fix from $1,9502020-07-27 HIGH 7.8 CVE-2020-1457EPSS 12% A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codec… Windows 10 Patch available Fix from $1,9502020-07-27 HIGH 8.8 CVE-2020-1448EPSS 10% A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remot… Office Patch available Fix from $1,9502020-07-14 HIGH 8.8 CVE-2020-1481EPSS 24% A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, ak… Eslint 2.1.7+ Fix from $1,9502020-07-14 HIGH 7.8 CVE-2020-1449 A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microso… 365 Apps Patch available Fix from $1,9502020-07-14 HIGH 7.8 CVE-2020-1458EPSS 11% A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'M… 365 Apps Patch available Fix from $1,9502020-07-14 HIGH 7.8 CVE-2020-1463 An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows SharedStream Library … Windows 10 Patch available Fix from $1,9502020-07-14 HIGH 7.8 CVE-2020-1465 An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, a… Onedrive Patch available Fix from $1,9502020-07-14 HIGH 7.5 CVE-2020-1469 A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'. Bond Patch available Fix from $1,9502020-07-14 HIGH 7.1 CVE-2020-1461 An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnera… Windows Defender Patch available Fix from $1,9502020-07-14 MEDIUM 6.5 CVE-2020-1468EPSS 5% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002020-07-14 MEDIUM 5.4 CVE-2020-1450 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-07-14 MEDIUM 5.4 CVE-2020-1451 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-07-14 MEDIUM 5.4 CVE-2020-1454 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authen… Sharepoint Enterprise Server Patch available Fix from $1,6002020-07-14 MEDIUM 5.4 CVE-2020-1456 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-07-14 HIGH 8.8 CVE-2020-1435EPSS 14% A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Rem… Windows 10 Patch available Fix from $1,9502020-07-14 HIGH 8.8 CVE-2020-1436EPSS 21% A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows … Windows 10 Patch available Fix from $1,9502020-07-14