CVEs published September 11, 2020
179 CVEs were published on September 11, 2020: 2 critical, 70 high. 1 is now in CISA KEV.
- Published
- 179
- Critical
- 2
- High
- 70
- Medium
- 64
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 1
- Fix available
- 14
Most affected products
- Microsoft Windows
- 69
- Microsoft Dynamics 365 (on-premises)
- 9
- Microsoft SharePoint Enterprise Server · Microsoft Share… +2
- 8
- Microsoft Windows Server · Microsoft Windows Server,
- 6
- Microsoft ChakraCore · Microsoft Edge +1
- 4
- Philips Patient Information Center iX
- 4
- Microsoft OneDrive for Windows
- 3
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 3
- QNAP Systems Helpdesk
- 3
- Microsoft Internet Explorer
- 2
Critical 2
High 70
- CVE-2020-14363An integer overflow vulnerability leading to a double-free was found in libX11.The X11 Project libX11
- CVE-2020-1593Windows Media Audio Decoder Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1594Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1576Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1559Windows Storage Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1523Microsoft SharePoint Server Tampering VulnerabilityMicrosoft SharePoint Server
- CVE-2020-1532Windows InstallService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1508Windows Media Audio Decoder Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1507Microsoft COM for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1491Windows Function Discovery Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1471Windows CloudExperienceHost Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1453Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1460Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1452Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1338Microsoft Word Remote Code Execution VulnerabilityMicrosoft SharePoint Server · Microsoft Office +1
- CVE-2020-1345Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1376Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1332Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-1335Microsoft Excel Remote Code Execution VulnerabilityMicrosoft SharePoint Server · Microsoft Office +2
- CVE-2020-1319Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1285GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1308DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1252Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1228Windows DNS Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-1245Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1218Microsoft Word Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +3
- CVE-2020-1198Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1200Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1193Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-1169Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1129Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1115Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1098Windows Shell Infrastructure Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1074Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1052Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1053DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1039Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-1031Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1013Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1030Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1012WinINet API Elevation of Privilege VulnerabilityMicrosoft Internet Explorer
- CVE-2020-16881Visual Studio JSON Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2020-16874Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2020-16875Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2020-16872Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16862Microsoft Dynamics 365 (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16857Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 for Finance and Operations
- CVE-2020-16856Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2020-16853OneDrive for Windows Elevation of Privilege VulnerabilityMicrosoft OneDrive for Windows
- CVE-2020-16851OneDrive for Windows Elevation of Privilege VulnerabilityMicrosoft OneDrive for Windows
- CVE-2020-16852OneDrive for Windows Elevation of Privilege VulnerabilityMicrosoft OneDrive for Windows
- CVE-2020-0997Windows Camera Codec Pack Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-0998Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0922Microsoft COM for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-0912Windows Function Discovery SSDP Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0908Windows Text Service Module Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-0911Windows Modules Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0886Windows Storage Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0870Shell infrastructure component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0838NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0839Windows dnsrslvr.dll Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0836Windows DNS Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-0790Microsoft splwow64 Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0766Microsoft Store Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0782Windows Cryptographic Catalog Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0761Active Directory Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-0718Active Directory Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-0648Windows RSoP Service Application Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-15166Denial of Service in ZeroMQzeromq libzmq
- CVE-2020-1045Microsoft ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft ASP.NET Core · Microsoft.AspNetCore.Http +12
Medium, low and unrated 107
- CVE-2020-25281An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software.
- CVE-2020-25283An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.
- CVE-2020-25282An issue was discovered on LG mobile devices with Android OS 10 software.
- CVE-2020-25278An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-25280An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets) software.
- CVE-2020-25279An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software.
- CVE-2020-23824ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code execution.
- CVE-2014-10401An issue was discovered in the DBI module before 1.632 for Perl.
- CVE-2013-7490An issue was discovered in the DBI module before 1.632 for Perl.
- CVE-2013-7491An issue was discovered in the DBI module before 1.628 for Perl.
- CVE-2020-14332A flaw was found in the Ansible Engine when using module_args.Red Hat Ansible · ansible
- CVE-2020-1598Windows UPnP Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1596TLS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1590Connected User Experiences and Telemetry Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1592Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1589Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1575Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Foundation 2013 Service Pack
- CVE-2020-1514Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-1506Windows Start-Up Application Elevation of Privilege VulnerabilityMicrosoft Internet Explorer
- CVE-2020-1482Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1440Microsoft SharePoint Server Tampering VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1303Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1256Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1250Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1227Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-1224Microsoft Excel Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2020-1205Microsoft SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-1180Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-1172Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-1159Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1146Microsoft Store Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1152Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1130Diagnostics Hub Standard Collector Elevation of Privilege VulnerabilityMicrosoft Windows · Microsoft Visual Studio
- CVE-2020-1133Diagnostics Hub Standard Collector Elevation of Privilege VulnerabilityMicrosoft Visual Studio · Microsoft Windows
- CVE-2020-1122Windows Language Pack Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1119Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1097Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1083Microsoft Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1091Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-1057Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-1044SQL Server Reporting Services Security Feature Bypass VulnerabilityMicrosoft SQL Server 2017 Reporting Services · Microsoft SQ…
- CVE-2020-1034Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-1038Windows Routing Utilities Denial of ServiceMicrosoft Windows
- CVE-2020-1033Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16879Projected Filesystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16884Internet Explorer Browser Helper Object (BHO) Memory Corruption VulnerabilityMicrosoft Edge
- CVE-2020-16878Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16873Xamarin.Forms Spoofing VulnerabilityMicrosoft xamarin.forms
- CVE-2020-16864Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16871Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16860Microsoft Dynamics 365 (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16861Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16858Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16859Microsoft Dynamics 365 (On-Premise) Cross Site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-16855Microsoft Office Information Disclosure VulnerabilityMicrosoft Office 2019 for Mac · Microsoft Office 2016 for M…
- CVE-2020-16854Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0951Windows Defender Application Control Security Feature Bypass VulnerabilityMicrosoft Windows · Microsoft PowerShell
- CVE-2020-0989Windows Mobile Device Management Diagnostics Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0928Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0941Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0921Microsoft Graphics Component Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-0914Windows State Repository Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0890Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-0904Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-0875Microsoft splwow64 Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-0878Microsoft Browser Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-0856Active Directory Information Disclosure VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-0837ADFS MFA Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-0805Projected Filesystem Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-0664Active Directory Information Disclosure VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-15169XSS in Action Viewrails actionview · actionview
- CVE-2020-25276An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1.
- CVE-2018-19946The vulnerability have been reported to affect earlier versions of Helpdesk.QNAP Systems Helpdesk
- CVE-2018-19947The vulnerability have been reported to affect earlier versions of Helpdesk.QNAP Systems Helpdesk
- CVE-2018-19948The vulnerability have been reported to affect earlier versions of Helpdesk.QNAP Systems Helpdesk
- CVE-2020-14100In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution.Xiaomi router R3600
- CVE-2020-14096Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.Xiaomi AI speaker
- CVE-2020-11991When using the StreamGenerator, the code parse a user-provided XML.Apache Cocoon
- CVE-2020-9239Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B veBLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P…
- CVE-2020-16212Philips Patient Monitoring Devices Exposure of Resource to Wrong SpherePhilips Patient Information Center iX
- CVE-2020-16220Philips Patient Monitoring Devices Improper Validation of Syntactic Correctness of InputPhilips Patient Information Center iX · Philips Performance…
- CVE-2020-15802Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth.
- CVE-2020-16216Philips Patient Monitoring Devices Improper Input ValidationPhilips IntelliVue patient monitors · Philips IntelliVue
- CVE-2020-16224Philips Patient Monitoring Devices Improper Handling of Length Parameter InconsistencyPhilips Patient Information Center iX
- CVE-2020-16228Philips Patient Monitoring Devices Improper Check for Certificate RevocationPhilips Patient Information Center iX · Philips Performa… +2
- CVE-2020-16222Philips Patient Monitoring Devices Improper AuthenticationPhilips Patient Information Center iX · Philips Performance…
- CVE-2020-16214Philips Patient Monitoring Devices Improper Neutralization of Formula Elements in a CSV FilePhilips Patient Information Center iX
- CVE-2020-16218Philips Patient Monitoring Devices Cross-site ScriptingPhilips Patient Information Center iX
- CVE-2020-24164A deserialization flaw is present in Taoensso Nippy before 2.14.2.com.taoensso:nippy
- CVE-2019-20917An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0.
- CVE-2019-20918An issue was discovered in InspIRCd 3 before 3.1.0.
- CVE-2020-25269An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0.
- CVE-2020-25247An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000.
- CVE-2020-25248An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and
- CVE-2020-25249An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25250An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25251An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25252An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and
- CVE-2020-25253An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25254An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25255An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25256An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25257An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25258An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25259An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-25260An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.
- CVE-2020-14330An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content aRed Hat Ansible · ansible