Browse CVEs

HIGH 7.8 CVE-2020-1347 An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Ele… Windows 10 Patch available Fix from $1,9502020-07-14 MEDIUM 6.7 CVE-2020-1333 An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Servi… Windows 10 Patch available Fix from $1,6002020-07-14 MEDIUM 5.5 CVE-2020-1330 An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mob… Windows 10 Patch available Fix from $1,6002020-07-14 MEDIUM 5.5 CVE-2020-1342EPSS 6% An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could… 365 Apps Patch available Fix from $1,6002020-07-14 MEDIUM 5.4 CVE-2020-1326 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server C… Azure Devops Server Patch available Fix from $1,6002020-07-14 CRITICAL 9.8 CVE-2020-1025EPSS 6% An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validatio… Lync Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1032EPSS 5% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1036EPSS 6% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1040 KEVEPSS 7% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1041EPSS 5% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1042EPSS 6% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 CRITICAL 9.0 CVE-2020-1043EPSS 5% A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user … Windows Server 2008 Patch available Fix from $2,3002020-07-14 HIGH 7.8 CVE-2020-1085 An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Functio… Windows 10 Patch available Fix from $1,9502020-07-14 HIGH 8.8 CVE-2020-1317 An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'. Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 8.8 CVE-2020-1321EPSS 12% A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office R… 365 Apps Patch available Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-1324 An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit t… Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-1334 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privi… Windows 10 Patch available Fix from $1,9502020-06-09 MEDIUM 6.5 CVE-2020-1322EPSS 5% An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Proj… 365 Apps Patch available Fix from $1,6002020-06-09 MEDIUM 6.5 CVE-2020-1329 A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing … Bing Patch available Fix from $1,6002020-06-09 MEDIUM 6.5 CVE-2020-1348EPSS 5% An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Infor… Windows 10 Patch available Fix from $1,6002020-06-09 MEDIUM 6.1 CVE-2020-1323 An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link… Sharepoint Enterprise Server Patch available Fix from $1,6002020-06-09 MEDIUM 6.1 CVE-2020-1327 A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injecti… Azure Devops Server Patch available Fix from $1,6002020-06-09 MEDIUM 5.9 CVE-2020-1343 An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Co… Visual Studio Live Share Patch available Fix from $1,6002020-06-09 MEDIUM 5.4 CVE-2020-1318 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-06-09 MEDIUM 5.4 CVE-2020-1320 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an a… Sharepoint Enterprise Server Patch available Fix from $1,6002020-06-09 MEDIUM 5.4 CVE-2020-1331 A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affecte… System Center Operations Manager Patch available Fix from $1,6002020-06-09 MEDIUM 5.4 CVE-2020-1340 A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofing Vulnera… Nugetgallery 2020.06.09+ Fix from $1,6002020-06-09 HIGH 7.8 CVE-2020-1304 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privi… Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-1305 An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Rep… Windows 10 Patch available Fix from $1,9502020-06-09 HIGH 7.8 CVE-2020-1306 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privi… Windows 10 Patch available Fix from $1,9502020-06-09