CVEs published November 11, 2020
131 CVEs were published on November 11, 2020: 1 critical, 75 high. 1 is now in CISA KEV.
- Published
- 131
- Critical
- 1
- High
- 75
- Medium
- 47
- Low
- 5
- Unrated
- 3
- Now in CISA KEV
- 1
- Fix available
- 14
Most affected products
- Microsoft Windows
- 48
- Microsoft Azure Sphere
- 15
- Microsoft HEVC Video Extensions
- 5
- Microsoft Raw Image Extension
- 5
- Microsoft Office · Microsoft 365 Apps for Enterprise +1
- 4
- Microsoft Windows Server · Microsoft Windows
- 4
- puncsky touchbase.ai
- 4
- Microsoft Dynamics 365 (on-premises)
- 3
- Microsoft Exchange Server 2019 Cumulative Update · Micro… +1
- 3
- Freedesktop accountsservice
- 2
Critical 1
High 75
- CVE-2020-26221Stored Cross Site Scripting in touchbase.aipuncsky touchbase.ai
- CVE-2020-26218HTML Injection in touchbase.aipuncsky touchbase.ai
- CVE-2020-5426Scheduler for TAS can transmit privileged UAA token in plaintextVMware Tanzu Pivotal Scheduler
- CVE-2020-15275malicious SVG attachment causing stored XSS vulnerability in MoinMoinmoinwiki moin-1.9 · moin
- CVE-2020-4685A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the aIBM Cognos Controller
- CVE-2020-7768Prototype Pollutiongrpc · @grpc/grpc-js
- CVE-2020-7329Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extensionMcAfee MVISION Endpoint ePO extension
- CVE-2020-7328Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extensionMcAfee MVISION Endpoint ePO extension
- CVE-2020-17110HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2020-17107HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2020-17108HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2020-17109HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2020-17105AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2020-17106HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2020-17104Visual Studio Code JSHint Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2020-17101HEIF Image Extensions Remote Code Execution VulnerabilityMicrosoft HEIF Image Extension
- CVE-2020-17088Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2020-17091Microsoft Teams Remote Code Execution VulnerabilityMicrosoft Teams
- CVE-2020-17086Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2020-17087Windows Kernel Local Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17084Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2020-17082Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2020-17079Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2020-17076Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17077Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17078Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2020-17074Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17075Windows USO Core Worker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17073Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17070Windows Update Medic Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17066Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel 2010 Service Pack
- CVE-2020-17067Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-17068Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-17064Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-17065Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-17062Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-17061Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17057Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2020-17058Microsoft Browser Memory Corruption VulnerabilityMicrosoft Internet Explorer · Microsoft Edge
- CVE-2020-17055Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17053Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2020-17052Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer · Microsoft Edge
- CVE-2020-17047Windows Network File System Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2020-17042Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2020-17043Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17044Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17041Windows Print Configuration Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17037Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17038Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17035Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17033Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17034Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17031Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17032Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17028Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17026Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17027Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17024Windows Client Side Rendering Print Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17025Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17019Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2010 Service Pack
- CVE-2020-17016Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-17014Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17011Windows Port Class Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17012Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17007Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17010Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17001Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16998DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16994Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16997Remote Desktop Protocol Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16992Azure Sphere Elevation of Privilege VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16991Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16987Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16984Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16970Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
Medium, low and unrated 55
- CVE-2020-5992NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dNVIDIA GeForce NOW Application
- CVE-2020-26220Information exposure in touchbase.aipuncsky touchbase.ai
- CVE-2020-26219Open Redirect in touchbase.aipuncsky touchbase.ai
- CVE-2020-8352In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.Lenovo BIOS
- CVE-2020-8353Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) featureLenovo Desktop and Workstation systems
- CVE-2020-8354A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrLenovo BIOS
- CVE-2020-27523Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen_key, display_name, browser_na
- CVE-2020-27524On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format stri
- CVE-2020-7767Regular Expression Denial of Service (ReDoS)express-validators
- CVE-2020-1325Azure DevOps Server and Team Foundation Services Spoofing VulnerabilityMicrosoft Azure DevOps Server 2019 Update
- CVE-2020-1599Windows Spoofing VulnerabilityMicrosoft Windows
- CVE-2020-17113Windows Camera Codec Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17102WebP Image Extensions Information Disclosure VulnerabilityMicrosoft WebP Image Extension
- CVE-2020-17100Visual Studio Tampering VulnerabilityMicrosoft Visual Studio
- CVE-2020-17090Microsoft Defender for Endpoint Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-17085Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2020-17083Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2020-17081Microsoft Raw Image Extension Information Disclosure VulnerabilityMicrosoft Raw Image Extension
- CVE-2020-17071Windows Delivery Optimization Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17069Windows NDIS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17063Microsoft Office Online Spoofing VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2020-17060Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-17056Windows Network File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17054Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-17048Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-17045Windows KernelStream Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17046Windows Error Reporting Denial of Service VulnerabilityMicrosoft Windows
- CVE-2020-17040Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-17036Windows Function Discovery SSDP Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17029Windows Canonical Display Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17030Windows MSCTF Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17020Microsoft Word Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2020-17021Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-17017Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17018Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-17015Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-17013Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17005Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-17006Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics CRM 2015 (on-premises)
- CVE-2020-17000Remote Desktop Protocol Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17004Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16999Windows WalletService Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16993Azure Sphere Elevation of Privilege VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16989Azure Sphere Elevation of Privilege VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16990Azure Sphere Information Disclosure VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16988Azure Sphere Elevation of Privilege VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16985Azure Sphere Information Disclosure VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16986Azure Sphere Denial of Service VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16983Azure Sphere Tampering VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16979Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-16981Azure Sphere Elevation of Privilege VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16982Azure Sphere Unsigned Code Execution VulnerabilityMicrosoft Azure Sphere
- CVE-2020-16127accountsservice .pam_environment infinite loopFreedesktop accountsservice
- CVE-2020-16126accountsservice drops ruid, allows unprivileged users to send it signalsFreedesktop accountsservice
- CVE-2020-17049Kerberos KDC Security Feature Bypass VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,