CVEs published May 21, 2020
168 CVEs were published on May 21, 2020: 1 critical, 74 high. 1 is now in CISA KEV.
- Published
- 168
- Critical
- 1
- High
- 74
- Medium
- 22
- Low
- 1
- Unrated
- 70
- Now in CISA KEV
- 1
- Fix available
- 152
Most affected products
- Microsoft Windows
- 79
- Google Chrome
- 35
- Microsoft Internet Explorer
- 7
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 7
- Microsoft Edge
- 4
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 3
- Microsoft ChakraCore · Microsoft Edge +1
- 2
- Microsoft SharePoint Enterprise Server 2013 Service Pack… +2
- 2
- [UNKNOWN] moodle · moodle/moodle
- 1
- centreon/centreon
- 1
Critical 1
High 74
- CVE-2020-1190Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1191Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1188Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1189Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1186Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1187Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1184Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1185Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1176Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1174Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1175Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1166Windows Clipboard Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1164Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1165Windows Clipboard Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1158Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1156Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1157Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1154Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1155Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1151Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1153Microsoft Graphics Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1149Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1150Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1144Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1142Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1143Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1139Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1140DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1137Windows Push Notification Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1138Windows Storage Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1135Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1136Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1132Windows Error Reporting Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1134Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1126Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1124Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1125Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1121Windows Clipboard Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1117Microsoft Color Management Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1118Microsoft Windows Transport Layer Security Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1114Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1112Windows Background Intelligent Transfer Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1110Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1111Windows Clipboard Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1109Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1093VBScript Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1090Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1092Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1087Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1088Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1086Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1079Microsoft Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1081Windows Printer Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1082Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1078Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1077Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1070Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1067Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1068Microsoft Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1064MSHTML Engine Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1061Microsoft Script Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1062Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1060VBScript Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1058VBScript Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1054Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1048Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1051Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1035VBScript Remote Code Execution VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1028Media Foundation Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2020-1010Microsoft Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1021Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0909Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-7808RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerabilityRAONWIZ K Upload
- CVE-2020-10738A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported version[UNKNOWN] moodle · moodle/moodle
Medium, low and unrated 93
- CVE-2020-1192Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2020-1195Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2020-1179Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1171Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2020-1173Microsoft Power BI Report Server Spoofing VulnerabilityMicrosoft Power BI Report Server
- CVE-2020-1161ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +9
- CVE-2020-1145Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1141Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1131Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1123Connected User Experiences and Telemetry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1116Windows CSRSS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1113Windows Task Scheduler Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-1108.NET Core & .NET Framework Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +13
- CVE-2020-1105Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1106Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1107Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2020-1103Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1104Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1101Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1102Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1099Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1100Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2020-1096Microsoft Edge PDF Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2020-1084Connected User Experiences and Telemetry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1075Windows Subsystem for Linux Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1076Windows Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-1071Windows Remote Access Common Dialog Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1072Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1069Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1065Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-1066.NET Framework Elevation of Privilege VulnerabilityMicrosoft .NET Framework 3.0 Service Pack · Microsoft .NET…
- CVE-2020-1063Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-1059Microsoft Edge Spoofing VulnerabilityMicrosoft Edge
- CVE-2020-1056Microsoft Edge Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2020-1055Microsoft Active Directory Federation Services Cross-Site Scripting VulnerabilityMicrosoft Windows
- CVE-2020-1037Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-1023Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1024Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0963Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0901Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +4
- CVE-2020-12693Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass
- CVE-2018-21234Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.org.jodd:jodd-json
- CVE-2019-20803Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme.
- CVE-2019-20804Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.
- CVE-2017-18868Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack
- CVE-2020-12828An issue was discovered in AnchorFree VPN SDK before 1.3.3.218.
- CVE-2020-12431A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16.
- CVE-2020-13258Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.contentful
- CVE-2020-13113An issue was discovered in libexif before 0.6.22.
- CVE-2020-13112An issue was discovered in libexif before 0.6.22.
- CVE-2020-13114An issue was discovered in libexif before 0.6.22.
- CVE-2020-8572Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerability which when succesSensitive Information Disclosure Vulnerability in Element O…
- CVE-2020-9069There is an information leakage vulnerability in some Huawei products.HUAWEI Anne-AL00 · HUAWEI Berkeley-L09 +26
- CVE-2020-7655netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling.netius
- CVE-2020-1799E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability.E6878-370
- CVE-2020-5752Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system Druva inSync Windows Client
- CVE-2020-6491Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via aGoogle Chrome
- CVE-2020-6489Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user Google Chrome
- CVE-2020-6490Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk tGoogle Chrome
- CVE-2020-6487Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictiGoogle Chrome
- CVE-2020-6488Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictiGoogle Chrome
- CVE-2020-6485Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2020-6486Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restricGoogle Chrome
- CVE-2020-6483Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictioGoogle Chrome
- CVE-2020-6484Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictiGoogle Chrome
- CVE-2020-6481Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofinGoogle Chrome
- CVE-2020-6482Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instalGoogle Chrome
- CVE-2020-6479Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted Google Chrome
- CVE-2020-6480Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictiGoogle Chrome
- CVE-2020-6477Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalGoogle Chrome
- CVE-2020-6478Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafGoogle Chrome
- CVE-2020-6475Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted Google Chrome
- CVE-2020-6476Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2020-6473Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive inGoogle Chrome
- CVE-2020-6474Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2020-6471Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instalGoogle Chrome
- CVE-2020-6472Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instalGoogle Chrome
- CVE-2020-6468Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HGoogle Chrome
- CVE-2020-6469Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instalGoogle Chrome
- CVE-2020-6470Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary Google Chrome
- CVE-2020-6466Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2020-6467Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-6464Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-6465Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2020-6462Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2020-6463Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2020-6460Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing Google Chrome
- CVE-2020-6461Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2020-6458Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruptGoogle Chrome
- CVE-2020-6459Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-6457Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2020-13252Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_pathcentreon/centreon
- CVE-2020-12647Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumst