Browse CVEs

HIGH 7.5 CVE-2020-0674 KEVEPSS 87% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engi… Internet Explorer Patch available Fix from $1,9502020-02-11 MEDIUM 5.5 CVE-2020-0675 An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.T… Windows 10 Patch available Fix from $1,6002020-02-11 HIGH 8.8 CVE-2020-0618 KEVEPSS 99% A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL… Sql Server Patch available Fix from $1,9502020-02-11 HIGH 8.0 CVE-2020-0655EPSS 66% A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker ab… Windows 10 Patch available Fix from $1,9502020-02-11 HIGH 7.8 CVE-2020-0657 An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windo… Windows 10 Patch available Fix from $1,9502020-02-11 HIGH 7.8 CVE-2020-0659 An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Se… Windows 10 Patch available Fix from $1,9502020-02-11 HIGH 7.5 CVE-2020-0660 A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends speciall… Windows 10 Patch available Fix from $1,9502020-02-11 MEDIUM 6.8 CVE-2020-0661 A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest o… Windows 10 Patch available Fix from $1,6002020-02-11 MEDIUM 5.5 CVE-2020-0658 An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory… Windows 10 Patch available Fix from $1,6002020-02-11 HIGH 7.8 CVE-2019-1414 An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studi… Visual Studio Code 1.39+ Fix from $1,9502020-01-24 MEDIUM 5.5 CVE-2019-1454 An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile… Windows 10 Patch available Fix from $1,6002020-01-24 HIGH 8.8 CVE-2019-1349EPSS 34% A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution … Visual Studio 2017 15.9.18 / 16.4.1+ Fix from $1,9502020-01-24 HIGH 8.8 CVE-2019-1350EPSS 26% A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution … Visual Studio 2017 15.9.18 / 16.4.1+ Fix from $1,9502020-01-24 HIGH 8.8 CVE-2019-1352EPSS 24% A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution … Visual Studio 2017 15.9.18 / 16.4.1+ Fix from $1,9502020-01-24 HIGH 8.8 CVE-2019-1354EPSS 22% A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution … Visual Studio 2017 15.9.18 / 16.4.1+ Fix from $1,9502020-01-24 HIGH 7.5 CVE-2019-1351EPSS 9% A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerabilit… Visual Studio 2017 15.9.18 / 16.4.1+ Fix from $1,9502020-01-24 MEDIUM 6.5 CVE-2018-8654 An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'. Dynamics 365 Patch available Fix from $1,6002020-01-24 HIGH 7.8 CVE-2019-9510 A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access t… Windows 10 Patch available Fix from $1,9502020-01-15 CRITICAL 9.8 CVE-2020-0646 KEVEPSS 99% A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Exec… .net Framework Patch available Fix from $2,3002020-01-14 CRITICAL 9.1 CVE-2020-0654 A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerpri… Onedrive Patch available Fix from $2,3002020-01-14 HIGH 7.8 CVE-2020-0644 An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privileg… Windows 10 Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0650EPSS 17% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft… Excel Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0651EPSS 17% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft… Excel Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0652EPSS 17% A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsof… Excel Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0653EPSS 20% A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft… Office 365 Proplus Patch available Fix from $1,9502020-01-14 MEDIUM 5.4 CVE-2020-0647 A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Sp… Office Online Server Patch available Fix from $1,6002020-01-14 MEDIUM 5.4 CVE-2020-0656 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to a… Dynamics 365 Patch available Fix from $1,6002020-01-14 HIGH 7.8 CVE-2020-0631 An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elev… Windows 10 Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0632 An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elev… Windows 10 Patch available Fix from $1,9502020-01-14 HIGH 7.8 CVE-2020-0633 An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elev… Windows 10 Patch available Fix from $1,9502020-01-14