CVEs published June 9, 2020
222 CVEs were published on June 9, 2020: 3 critical, 3 high. 4 are now in CISA KEV.
- Published
- 222
- Critical
- 3
- High
- 3
- Medium
- 18
- Low
- 0
- Unrated
- 198
- Now in CISA KEV
- 4
- Fix available
- 61
Most affected products
- Microsoft Windows
- 87
- Apple iOS · Apple macOS +2
- 17
- Apple macOS
- 15
- Apple iOS · Apple tvOS +4
- 8
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 8
- Lenovo BIOS
- 6
- Apple iOS
- 5
- Apple iOS · Apple macOS
- 5
- Microsoft Internet Explorer 11 on Windows · Microsoft Inter…
- 4
- Microsoft Windows · Microsoft Visual Studio
- 4
Critical 3
- CVE-2020-6265SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass SAP SE SAP Commerce
- CVE-2020-9412TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command ExecutionTIBCO Software TIBCO Managed File Transfer Platform Server…
- CVE-2020-9411TIBCO Managed File Transfer Platform Server for IBM i Authentication BypassTIBCO Software TIBCO Managed File Transfer Platform Server…
High 3
- CVE-2020-0986An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-9818An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple iOS-1 +1
- CVE-2020-9802A logic issue was addressed with improved restrictions.Apple iOS · Apple tvOS +4
Medium, low and unrated 216
- CVE-2020-13996The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
- CVE-2020-8337An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCLenovo Synaptics Smart Audio UWP App
- CVE-2020-8336Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.Lenovo BIOS
- CVE-2020-8334The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unautLenovo BIOS
- CVE-2020-8323A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo NoteboLenovo BIOS
- CVE-2020-8322A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allLenovo BIOS
- CVE-2020-8321A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStatiLenovo BIOS
- CVE-2020-8320An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.Lenovo BIOS
- CVE-2019-6196A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during Lenovo Installation Packages
- CVE-2019-6173A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during instLenovo Installation Packages
- CVE-2020-1340A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery SpoofinMicrosoft NuGetGallery
- CVE-2020-1343An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Microsoft Visual Studio Code Live Share extension
- CVE-2020-1348An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-1331A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to aMicrosoft System Center 2016 Operations Manager
- CVE-2020-1334An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1327A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTMMicrosoft Azure DevOps Server
- CVE-2020-1329A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Microsoft Bing Search for Android
- CVE-2020-1323An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could seMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1324An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To Microsoft Windows
- CVE-2020-1321A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'MicrosoftMicrosoft 365 Apps for Enterprise for 32-bit Systems · M… +1
- CVE-2020-1322An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'MicroMicrosoft Project · Microsoft Office +2
- CVE-2020-1317An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege VulnerabMicrosoft Windows
- CVE-2020-1318A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1320A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1315An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer InformatiMicrosoft Internet Explorer 11 on Windows · Microsoft Inter…
- CVE-2020-1316An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1313An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'WindowsMicrosoft Windows
- CVE-2020-1314An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messagesMicrosoft Windows
- CVE-2020-1311An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model Microsoft Windows
- CVE-2020-1312An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-1309An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an Microsoft Windows
- CVE-2020-1310An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-1306An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1307An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1304An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1305An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows Microsoft Windows
- CVE-2020-1301A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests,Microsoft Windows
- CVE-2020-1302An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-1298A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1299A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaMicrosoft Windows
- CVE-2020-1300A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an Microsoft Windows
- CVE-2020-1296A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & Microsoft Windows
- CVE-2020-1297A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1294An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiMicrosoft Windows
- CVE-2020-1295An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1292An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aMicrosoft Windows
- CVE-2020-1293An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Microsoft Windows · Microsoft Visual Studio
- CVE-2020-1290An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-1291An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'WindoMicrosoft Windows
- CVE-2020-1286A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploMicrosoft Windows
- CVE-2020-1287An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServiMicrosoft Windows
- CVE-2020-1289A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Foundation
- CVE-2020-1283A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Microsoft Windows
- CVE-2020-1284A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests,Microsoft Windows
- CVE-2020-1281A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Microsoft Windows
- CVE-2020-1282An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1279An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka 'Microsoft Windows
- CVE-2020-1280An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows BluetooMicrosoft Windows
- CVE-2020-1277An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioMicrosoft Windows
- CVE-2020-1278An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Microsoft Windows · Microsoft Visual Studio
- CVE-2020-1275An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1276An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1273An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1274An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1271An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerabilMicrosoft Windows
- CVE-2020-1272An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading Microsoft Windows
- CVE-2020-1268An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service InformationMicrosoft Windows
- CVE-2020-1269An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1270An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service ElevatioMicrosoft Windows
- CVE-2020-1265An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1266An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1263An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error ReportMicrosoft Windows
- CVE-2020-1264An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1261An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error ReportMicrosoft Windows
- CVE-2020-1262An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1259A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'WindowMicrosoft Windows Server, · Microsoft Windows
- CVE-2020-1260A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-1257An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Microsoft Visual Studio · Microsoft Windows
- CVE-2020-1258An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-1253An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-1254An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authMicrosoft Windows
- CVE-2020-1255An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handlesMicrosoft Windows
- CVE-2020-1248A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka Microsoft Windows
- CVE-2020-1251An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-1246An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1247An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-1242An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge InformationMicrosoft Edge (EdgeHTML-based) on Windows
- CVE-2020-1244A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnMicrosoft Windows
- CVE-2020-1239A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-1241A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerabilitMicrosoft Windows
- CVE-2020-1237An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oMicrosoft Windows
- CVE-2020-1238A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-1234An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerabiliMicrosoft Windows
- CVE-2020-1235An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1236A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-1232An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-1233An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1230A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-1231An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationMicrosoft Windows
- CVE-2020-1226A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +2
- CVE-2020-1229A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aMicrosoft 365 Apps for Enterprise for 32-bit Systems · M… +2
- CVE-2020-1223A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerabiMicrosoft Word for Android
- CVE-2020-1225A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft 365 Apps for Enterprise for 32-bit Systems · M… +2
- CVE-2020-1219A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory CorrMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +2
- CVE-2020-1220A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft EdgMicrosoft Edge (Chromium-based) in IE Mode on Windows
- CVE-2020-1222An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an Microsoft Windows
- CVE-2020-1216A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer 11 on Windows · Microsoft Inter…
- CVE-2020-1217An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime InformatiMicrosoft Windows
- CVE-2020-1214A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer 11 on Windows · Microsoft Inter…
- CVE-2020-1215A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-1212An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an Microsoft Windows
- CVE-2020-1213A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer 11 on Windows · Microsoft Inter…
- CVE-2020-1209An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows NetwMicrosoft Windows
- CVE-2020-1211An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'ConnecMicrosoft Windows
- CVE-2020-1207An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-1208A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-1203An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to pMicrosoft Windows · Microsoft Visual Studio
- CVE-2020-1204An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'WiMicrosoft Windows
- CVE-2020-1206An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reqMicrosoft Windows
- CVE-2020-1201An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows NoMicrosoft Windows
- CVE-2020-1202An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to pMicrosoft Windows · Microsoft Visual Studio
- CVE-2020-1197An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error RMicrosoft Windows
- CVE-2020-1199An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback HubMicrosoft Windows
- CVE-2020-1194A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of SerMicrosoft Windows
- CVE-2020-1196An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print ConfiguratiMicrosoft Windows
- CVE-2020-1181A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net webMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1183A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1177A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1178An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatioMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1163An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabiMicrosoft Forefront Endpoint Protection · Microsoft Syst… +2
- CVE-2020-1170An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabiMicrosoft Forefront Endpoint Protection · Microsoft Syst… +2
- CVE-2020-1148A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1160An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrMicrosoft Windows
- CVE-2020-1162An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To Microsoft Windows
- CVE-2020-1073A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-1120A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'ConnMicrosoft Windows
- CVE-2020-0916An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WMicrosoft Windows
- CVE-2020-0915An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WMicrosoft Windows
- CVE-2020-7456In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, FreeBSD
- CVE-2020-13872Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach.
- CVE-2020-11957The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Ra
- CVE-2020-13911Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation.
- CVE-2020-12000The affected product is vulnerable to the handling of serialized data.Ignition 8 Gateway
- CVE-2020-10644The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Ignition 8 Gateway
- CVE-2020-13892The SportsPress plugin before 2.7.2 for WordPress allows XSS.
- CVE-2020-12004The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and IgnitIgnition 8 Gateway
- CVE-2020-13160AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
- CVE-2020-9852An integer overflow was addressed through improved input validation.Apple iOS · Apple macOS +2
- CVE-2020-9850A logic issue was addressed with improved restrictions.Apple iOS · Apple tvOS +4
- CVE-2020-9856This issue was addressed with improved checks.Apple macOS
- CVE-2020-9843An input validation issue was addressed with improved input validation.Apple iOS · Apple tvOS +4
- CVE-2020-9858A dynamic library loading issue was addressed with improved path searching.Apple Windows Migration Assistant
- CVE-2020-9848An authorization issue was addressed with improved state management.Apple iOS
- CVE-2020-9855A validation issue existed in the handling of symlinks.Apple macOS
- CVE-2020-9851An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2020-9847An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2020-9841An integer overflow was addressed through improved input validation.Apple macOS
- CVE-2020-9844A double free issue was addressed with improved memory management.Apple iOS · Apple macOS
- CVE-2020-9838An out-of-bounds read was addressed with improved bounds checking.Apple iOS
- CVE-2020-9842An entitlement parsing issue was addressed with improved parsing.Apple iOS · Apple macOS +2
- CVE-2020-9837An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +1
- CVE-2020-9839A race condition was addressed with improved state handling.Apple iOS · Apple macOS +2
- CVE-2020-9835An issue existed in the pausing of FaceTime video.Apple iOS
- CVE-2020-9833A memory initialization issue was addressed with improved memory handling.Apple macOS
- CVE-2020-9829A validation issue was addressed with improved input sanitization.Apple iOS · Apple tvOS +1
- CVE-2020-9834A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2020-9831An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2020-9832An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2020-9826A denial of service issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2020-9824A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2020-9830A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2020-9827A denial of service issue was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2020-9822An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2020-9825An access issue was addressed with additional sandbox restrictions.Apple iOS · Apple macOS
- CVE-2020-9820A logic issue was addressed with improved restrictions.Apple iOS
- CVE-2020-9821A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2020-9823This issue was addressed with improved checks.Apple iOS
- CVE-2020-9789An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +4
- CVE-2020-9819A memory consumption issue was addressed with improved memory handling.Apple iOS · Apple iOS-1 +2
- CVE-2020-9816An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9817A permissions issue existed.Apple macOS
- CVE-2020-9815An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2020-9790An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple macOS +4
- CVE-2020-9813A logic issue existed resulting in memory corruption.Apple iOS · Apple macOS +2
- CVE-2020-9814A logic issue existed resulting in memory corruption.Apple iOS · Apple macOS +2
- CVE-2020-9808A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2020-9788A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2020-9812An information disclosure issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2020-9807A memory corruption issue was addressed with improved state management.Apple iOS · Apple tvOS +4
- CVE-2020-9811An information disclosure issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2020-9809An information disclosure issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2020-9806A memory corruption issue was addressed with improved state management.Apple iOS · Apple tvOS +4
- CVE-2020-9805A logic issue was addressed with improved restrictions.Apple iOS · Apple tvOS +4
- CVE-2020-9803A memory corruption issue was addressed with improved validation.Apple iOS · Apple tvOS +4
- CVE-2020-9800A type confusion issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2020-9804A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2020-9801A logic issue was addressed with improved restrictions.Apple Safari
- CVE-2020-9794An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +4
- CVE-2020-9793A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2020-9795A use after free issue was addressed with improved memory management.Apple iOS · Apple macOS +2
- CVE-2020-9791An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2020-9797An information disclosure issue was addressed by removing the vulnerable code.Apple iOS · Apple macOS +2
- CVE-2020-9792A validation issue was addressed with improved input sanitization.Apple iOS · Apple macOS
- CVE-2020-3882This issue was addressed with improved checks.Apple macOS
- CVE-2020-13266Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other userGitLab
- CVE-2020-13980OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because opencart/opencart
- CVE-2020-13976An issue was discovered in DD-WRT through 16214.
- CVE-2020-13977Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify th
- CVE-2020-13978Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute
- CVE-2020-10757A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages.Kernel
- CVE-2020-10761An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1.Red Hat QEMU:
- CVE-2020-5589SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SPSony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, W…
- CVE-2020-13974An issue was discovered in the Linux kernel 4.4 through 5.7.1.
- CVE-2020-13973OWASP json-sanitizer before 1.2.1 allows XSS.com.mikesamuel:json-sanitizer
- CVE-2020-13964An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5.
- CVE-2020-13965An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5.