# CVEs published 2020-05-21

168 CVEs were published on May 21, 2020: 1 critical, 74 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-1192](https://cve.now/CVE-2020-1192.md): Visual Studio Code Python Extension Remote Code Execution Vulnerability (no CVSS, Microsoft Visual Studio Code)
- [CVE-2020-1195](https://cve.now/CVE-2020-1195.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 3.1, Microsoft Edge)
- [CVE-2020-1190](https://cve.now/CVE-2020-1190.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1191](https://cve.now/CVE-2020-1191.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1188](https://cve.now/CVE-2020-1188.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1189](https://cve.now/CVE-2020-1189.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1186](https://cve.now/CVE-2020-1186.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1187](https://cve.now/CVE-2020-1187.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1179](https://cve.now/CVE-2020-1179.md): Windows GDI Information Disclosure Vulnerability (no CVSS, Microsoft Windows)
- [CVE-2020-1184](https://cve.now/CVE-2020-1184.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1185](https://cve.now/CVE-2020-1185.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1176](https://cve.now/CVE-2020-1176.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1174](https://cve.now/CVE-2020-1174.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1175](https://cve.now/CVE-2020-1175.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1166](https://cve.now/CVE-2020-1166.md): Windows Clipboard Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1171](https://cve.now/CVE-2020-1171.md): Visual Studio Code Python Extension Remote Code Execution Vulnerability (no CVSS, Microsoft Python extension for Visual Studio Code)
- [CVE-2020-1173](https://cve.now/CVE-2020-1173.md): Microsoft Power BI Report Server Spoofing Vulnerability (no CVSS, Microsoft Power BI Report Server)
- [CVE-2020-1164](https://cve.now/CVE-2020-1164.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1165](https://cve.now/CVE-2020-1165.md): Windows Clipboard Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1158](https://cve.now/CVE-2020-1158.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1161](https://cve.now/CVE-2020-1161.md): ASP.NET Core Denial of Service Vulnerability (no CVSS, Microsoft ASP.NET Core · Microsoft Visual Studio +9)
- [CVE-2020-1156](https://cve.now/CVE-2020-1156.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1157](https://cve.now/CVE-2020-1157.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1154](https://cve.now/CVE-2020-1154.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1155](https://cve.now/CVE-2020-1155.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1151](https://cve.now/CVE-2020-1151.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1153](https://cve.now/CVE-2020-1153.md): Microsoft Graphics Components Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1149](https://cve.now/CVE-2020-1149.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1150](https://cve.now/CVE-2020-1150.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1144](https://cve.now/CVE-2020-1144.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1145](https://cve.now/CVE-2020-1145.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1141](https://cve.now/CVE-2020-1141.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1142](https://cve.now/CVE-2020-1142.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1143](https://cve.now/CVE-2020-1143.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1139](https://cve.now/CVE-2020-1139.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1140](https://cve.now/CVE-2020-1140.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1137](https://cve.now/CVE-2020-1137.md): Windows Push Notification Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1138](https://cve.now/CVE-2020-1138.md): Windows Storage Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1135](https://cve.now/CVE-2020-1135.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1136](https://cve.now/CVE-2020-1136.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1132](https://cve.now/CVE-2020-1132.md): Windows Error Reporting Manager Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1134](https://cve.now/CVE-2020-1134.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1126](https://cve.now/CVE-2020-1126.md): Media Foundation Memory Corruption Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-1131](https://cve.now/CVE-2020-1131.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1124](https://cve.now/CVE-2020-1124.md): Windows State Repository Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1125](https://cve.now/CVE-2020-1125.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1121](https://cve.now/CVE-2020-1121.md): Windows Clipboard Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-1123](https://cve.now/CVE-2020-1123.md): Connected User Experiences and Telemetry Service Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1117](https://cve.now/CVE-2020-1117.md): Microsoft Color Management Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-1118](https://cve.now/CVE-2020-1118.md): Microsoft Windows Transport Layer Security Denial of Service Vulnerability (CVSS 8.6, Microsoft Windows)
- [CVE-2020-1114](https://cve.now/CVE-2020-1114.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1116](https://cve.now/CVE-2020-1116.md): Windows CSRSS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1112](https://cve.now/CVE-2020-1112.md): Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability (CVSS 8.5, Microsoft Windows)
- [CVE-2020-1113](https://cve.now/CVE-2020-1113.md): Windows Task Scheduler Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2020-1110](https://cve.now/CVE-2020-1110.md): Windows Update Stack Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1111](https://cve.now/CVE-2020-1111.md): Windows Clipboard Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1108](https://cve.now/CVE-2020-1108.md): .NET Core & .NET Framework Denial of Service Vulnerability (no CVSS, Microsoft .NET · Microsoft Visual Studio +13)
- [CVE-2020-1109](https://cve.now/CVE-2020-1109.md): Windows Update Stack Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1105](https://cve.now/CVE-2020-1105.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1106](https://cve.now/CVE-2020-1106.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1107](https://cve.now/CVE-2020-1107.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server 2013 Service Pack… +2)
- [CVE-2020-1103](https://cve.now/CVE-2020-1103.md): Microsoft SharePoint Information Disclosure Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1104](https://cve.now/CVE-2020-1104.md): Microsoft SharePoint Spoofing Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1101](https://cve.now/CVE-2020-1101.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1102](https://cve.now/CVE-2020-1102.md): Microsoft SharePoint Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1099](https://cve.now/CVE-2020-1099.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-1100](https://cve.now/CVE-2020-1100.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server 2013 Service Pack… +2)
- [CVE-2020-1093](https://cve.now/CVE-2020-1093.md): VBScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1096](https://cve.now/CVE-2020-1096.md): Microsoft Edge PDF Remote Code Execution Vulnerability (CVSS 4.2, Microsoft Edge)
- [CVE-2020-1090](https://cve.now/CVE-2020-1090.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1092](https://cve.now/CVE-2020-1092.md): Internet Explorer Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1087](https://cve.now/CVE-2020-1087.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1088](https://cve.now/CVE-2020-1088.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1084](https://cve.now/CVE-2020-1084.md): Connected User Experiences and Telemetry Service Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1086](https://cve.now/CVE-2020-1086.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1079](https://cve.now/CVE-2020-1079.md): Microsoft Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1081](https://cve.now/CVE-2020-1081.md): Windows Printer Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1082](https://cve.now/CVE-2020-1082.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1078](https://cve.now/CVE-2020-1078.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1075](https://cve.now/CVE-2020-1075.md): Windows Subsystem for Linux Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1076](https://cve.now/CVE-2020-1076.md): Windows Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1077](https://cve.now/CVE-2020-1077.md): Windows Runtime Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1071](https://cve.now/CVE-2020-1071.md): Windows Remote Access Common Dialog Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2020-1072](https://cve.now/CVE-2020-1072.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1069](https://cve.now/CVE-2020-1069.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1070](https://cve.now/CVE-2020-1070.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1067](https://cve.now/CVE-2020-1067.md): Windows Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1068](https://cve.now/CVE-2020-1068.md): Microsoft Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1065](https://cve.now/CVE-2020-1065.md): Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2020-1066](https://cve.now/CVE-2020-1066.md): .NET Framework Elevation of Privilege Vulnerability (no CVSS, Microsoft .NET Framework 3.0 Service Pack · Microsoft .NET…)
- [CVE-2020-1063](https://cve.now/CVE-2020-1063.md): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (no CVSS, Microsoft Dynamics 365 (on-premises))
- [CVE-2020-1064](https://cve.now/CVE-2020-1064.md): MSHTML Engine Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1061](https://cve.now/CVE-2020-1061.md): Microsoft Script Runtime Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-1062](https://cve.now/CVE-2020-1062.md): Internet Explorer Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1059](https://cve.now/CVE-2020-1059.md): Microsoft Edge Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2020-1060](https://cve.now/CVE-2020-1060.md): VBScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1056](https://cve.now/CVE-2020-1056.md): Microsoft Edge Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2020-1058](https://cve.now/CVE-2020-1058.md): VBScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1054](https://cve.now/CVE-2020-1054.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, KEV, Microsoft Windows)
- [CVE-2020-1055](https://cve.now/CVE-2020-1055.md): Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-1048](https://cve.now/CVE-2020-1048.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1051](https://cve.now/CVE-2020-1051.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1035](https://cve.now/CVE-2020-1035.md): VBScript Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2020-1037](https://cve.now/CVE-2020-1037.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2020-1023](https://cve.now/CVE-2020-1023.md): Microsoft SharePoint Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1024](https://cve.now/CVE-2020-1024.md): Microsoft SharePoint Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-1028](https://cve.now/CVE-2020-1028.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1010](https://cve.now/CVE-2020-1010.md): Microsoft Windows Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1021](https://cve.now/CVE-2020-1021.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-0909](https://cve.now/CVE-2020-0909.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-0963](https://cve.now/CVE-2020-0963.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-0901](https://cve.now/CVE-2020-0901.md): Microsoft Excel Remote Code Execution Vulnerability (no CVSS, Microsoft 365 Apps for Enterprise · Microsoft Excel 2010… +4)
- [CVE-2020-12693](https://cve.now/CVE-2020-12693.md): Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass (no CVSS)
- [CVE-2018-21234](https://cve.now/CVE-2018-21234.md): Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set. (no CVSS, org.jodd:jodd-json)
- [CVE-2019-20803](https://cve.now/CVE-2019-20803.md): Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g\_preview\_theme. (no CVSS)
- [CVE-2019-20804](https://cve.now/CVE-2019-20804.md): Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account. (no CVSS)
- [CVE-2017-18868](https://cve.now/CVE-2017-18868.md): Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack (no CVSS)
- [CVE-2020-7808](https://cve.now/CVE-2020-7808.md): RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability (CVSS 8.7, RAONWIZ K Upload)
- [CVE-2020-12828](https://cve.now/CVE-2020-12828.md): An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. (no CVSS)
- [CVE-2020-12431](https://cve.now/CVE-2020-12431.md): A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. (no CVSS)
- [CVE-2020-13258](https://cve.now/CVE-2020-13258.md): Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py. (no CVSS, contentful)
- [CVE-2020-13113](https://cve.now/CVE-2020-13113.md): An issue was discovered in libexif before 0.6.22. (no CVSS)
- [CVE-2020-13112](https://cve.now/CVE-2020-13112.md): An issue was discovered in libexif before 0.6.22. (no CVSS)
- [CVE-2020-13114](https://cve.now/CVE-2020-13114.md): An issue was discovered in libexif before 0.6.22. (no CVSS)
- [CVE-2020-10738](https://cve.now/CVE-2020-10738.md): A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported version (CVSS 7.5, \[UNKNOWN\] moodle · moodle/moodle)
- [CVE-2020-9045](https://cve.now/CVE-2020-9045.md): C•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software. (CVSS 9.9, Johnson Controls Software House C•CURE 9000 · Johnson Contr…)
- [CVE-2020-8572](https://cve.now/CVE-2020-8572.md): Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerability which when succes (no CVSS, Sensitive Information Disclosure Vulnerability in Element O…)
- [CVE-2020-9069](https://cve.now/CVE-2020-9069.md): There is an information leakage vulnerability in some Huawei products. (no CVSS, HUAWEI Anne-AL00 · HUAWEI Berkeley-L09 +26)
- [CVE-2020-7655](https://cve.now/CVE-2020-7655.md): netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. (no CVSS, netius)
- [CVE-2020-1799](https://cve.now/CVE-2020-1799.md): E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. (no CVSS, E6878-370)
- [CVE-2020-5752](https://cve.now/CVE-2020-5752.md): Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system (no CVSS, Druva inSync Windows Client)
- [CVE-2020-6491](https://cve.now/CVE-2020-6491.md): Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a (no CVSS, Google Chrome)
- [CVE-2020-6489](https://cve.now/CVE-2020-6489.md): Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user (no CVSS, Google Chrome)
- [CVE-2020-6490](https://cve.now/CVE-2020-6490.md): Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk t (no CVSS, Google Chrome)
- [CVE-2020-6487](https://cve.now/CVE-2020-6487.md): Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restricti (no CVSS, Google Chrome)
- [CVE-2020-6488](https://cve.now/CVE-2020-6488.md): Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restricti (no CVSS, Google Chrome)
- [CVE-2020-6485](https://cve.now/CVE-2020-6485.md): Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the render (no CVSS, Google Chrome)
- [CVE-2020-6486](https://cve.now/CVE-2020-6486.md): Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restric (no CVSS, Google Chrome)
- [CVE-2020-6483](https://cve.now/CVE-2020-6483.md): Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictio (no CVSS, Google Chrome)
- [CVE-2020-6484](https://cve.now/CVE-2020-6484.md): Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restricti (no CVSS, Google Chrome)
- [CVE-2020-6481](https://cve.now/CVE-2020-6481.md): Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofin (no CVSS, Google Chrome)
- [CVE-2020-6482](https://cve.now/CVE-2020-6482.md): Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instal (no CVSS, Google Chrome)
- [CVE-2020-6479](https://cve.now/CVE-2020-6479.md): Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted (no CVSS, Google Chrome)
- [CVE-2020-6480](https://cve.now/CVE-2020-6480.md): Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restricti (no CVSS, Google Chrome)
- [CVE-2020-6477](https://cve.now/CVE-2020-6477.md): Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escal (no CVSS, Google Chrome)
- [CVE-2020-6478](https://cve.now/CVE-2020-6478.md): Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a craf (no CVSS, Google Chrome)
- [CVE-2020-6475](https://cve.now/CVE-2020-6475.md): Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted (no CVSS, Google Chrome)
- [CVE-2020-6476](https://cve.now/CVE-2020-6476.md): Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a ma (no CVSS, Google Chrome)
- [CVE-2020-6473](https://cve.now/CVE-2020-6473.md): Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive in (no CVSS, Google Chrome)
- [CVE-2020-6474](https://cve.now/CVE-2020-6474.md): Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafte (no CVSS, Google Chrome)
- [CVE-2020-6471](https://cve.now/CVE-2020-6471.md): Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instal (no CVSS, Google Chrome)
- [CVE-2020-6472](https://cve.now/CVE-2020-6472.md): Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instal (no CVSS, Google Chrome)
- [CVE-2020-6468](https://cve.now/CVE-2020-6468.md): Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted H (no CVSS, Google Chrome)
- [CVE-2020-6469](https://cve.now/CVE-2020-6469.md): Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to instal (no CVSS, Google Chrome)
- [CVE-2020-6470](https://cve.now/CVE-2020-6470.md): Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary (no CVSS, Google Chrome)
- [CVE-2020-6466](https://cve.now/CVE-2020-6466.md): Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potenti (no CVSS, Google Chrome)
- [CVE-2020-6467](https://cve.now/CVE-2020-6467.md): Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2020-6464](https://cve.now/CVE-2020-6464.md): Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2020-6465](https://cve.now/CVE-2020-6465.md): Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer p (no CVSS, Google Chrome)
- [CVE-2020-6462](https://cve.now/CVE-2020-6462.md): Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process (no CVSS, Google Chrome)
- [CVE-2020-6463](https://cve.now/CVE-2020-6463.md): Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2020-6460](https://cve.now/CVE-2020-6460.md): Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing (no CVSS, Google Chrome)
- [CVE-2020-6461](https://cve.now/CVE-2020-6461.md): Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to pote (no CVSS, Google Chrome)
- [CVE-2020-6458](https://cve.now/CVE-2020-6458.md): Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corrupt (no CVSS, Google Chrome)
- [CVE-2020-6459](https://cve.now/CVE-2020-6459.md): Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2020-6457](https://cve.now/CVE-2020-6457.md): Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escap (no CVSS, Google Chrome)
- [CVE-2020-13252](https://cve.now/CVE-2020-13252.md): Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase\_status\_path (no CVSS, centreon/centreon)
- [CVE-2020-12647](https://cve.now/CVE-2020-12647.md): Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumst (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.