# CVEs published 2020-11-11 131 CVEs were published on November 11, 2020: 1 critical, 75 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2020-5992](https://cve.now/CVE-2020-5992.md): NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software d (no CVSS, NVIDIA GeForce NOW Application) - [CVE-2020-26221](https://cve.now/CVE-2020-26221.md): Stored Cross Site Scripting in touchbase.ai (CVSS 8.0, puncsky touchbase.ai) - [CVE-2020-26220](https://cve.now/CVE-2020-26220.md): Information exposure in touchbase.ai (CVSS 3.5, puncsky touchbase.ai) - [CVE-2020-26219](https://cve.now/CVE-2020-26219.md): Open Redirect in touchbase.ai (CVSS 4.7, puncsky touchbase.ai) - [CVE-2020-26218](https://cve.now/CVE-2020-26218.md): HTML Injection in touchbase.ai (CVSS 8.0, puncsky touchbase.ai) - [CVE-2020-8352](https://cve.now/CVE-2020-8352.md): In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes. (CVSS 2.4, Lenovo BIOS) - [CVE-2020-8353](https://cve.now/CVE-2020-8353.md): Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature (CVSS 6.7, Lenovo Desktop and Workstation systems) - [CVE-2020-8354](https://cve.now/CVE-2020-8354.md): A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitr (CVSS 6.4, Lenovo BIOS) - [CVE-2020-5426](https://cve.now/CVE-2020-5426.md): Scheduler for TAS can transmit privileged UAA token in plaintext (CVSS 8.6, VMware Tanzu Pivotal Scheduler) - [CVE-2020-15275](https://cve.now/CVE-2020-15275.md): malicious SVG attachment causing stored XSS vulnerability in MoinMoin (CVSS 8.7, moinwiki moin-1.9 · moin) - [CVE-2020-27523](https://cve.now/CVE-2020-27523.md): Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen\_key, display\_name, browser\_na (no CVSS) - [CVE-2020-27524](https://cve.now/CVE-2020-27524.md): On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R\_CN\_AU\_P0395) mishandles %x and %s format stri (no CVSS) - [CVE-2020-4685](https://cve.now/CVE-2020-4685.md): A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the a (CVSS 8.0, IBM Cognos Controller) - [CVE-2020-7767](https://cve.now/CVE-2020-7767.md): Regular Expression Denial of Service (ReDoS) (CVSS 5.3, express-validators) - [CVE-2020-7768](https://cve.now/CVE-2020-7768.md): Prototype Pollution (CVSS 7.5, grpc · @grpc/grpc-js) - [CVE-2020-7329](https://cve.now/CVE-2020-7329.md): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (CVSS 7.2, McAfee MVISION Endpoint ePO extension) - [CVE-2020-7328](https://cve.now/CVE-2020-7328.md): Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension (CVSS 7.2, McAfee MVISION Endpoint ePO extension) - [CVE-2020-1325](https://cve.now/CVE-2020-1325.md): Azure DevOps Server and Team Foundation Services Spoofing Vulnerability (CVSS 5.4, Microsoft Azure DevOps Server 2019 Update) - [CVE-2020-1599](https://cve.now/CVE-2020-1599.md): Windows Spoofing Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17110](https://cve.now/CVE-2020-17110.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2020-17113](https://cve.now/CVE-2020-17113.md): Windows Camera Codec Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17107](https://cve.now/CVE-2020-17107.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2020-17108](https://cve.now/CVE-2020-17108.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2020-17109](https://cve.now/CVE-2020-17109.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2020-17105](https://cve.now/CVE-2020-17105.md): AV1 Video Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft AV1 Video Extension) - [CVE-2020-17106](https://cve.now/CVE-2020-17106.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions) - [CVE-2020-17102](https://cve.now/CVE-2020-17102.md): WebP Image Extensions Information Disclosure Vulnerability (CVSS 5.5, Microsoft WebP Image Extension) - [CVE-2020-17104](https://cve.now/CVE-2020-17104.md): Visual Studio Code JSHint Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code) - [CVE-2020-17100](https://cve.now/CVE-2020-17100.md): Visual Studio Tampering Vulnerability (CVSS 5.5, Microsoft Visual Studio) - [CVE-2020-17101](https://cve.now/CVE-2020-17101.md): HEIF Image Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEIF Image Extension) - [CVE-2020-17088](https://cve.now/CVE-2020-17088.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server · Microsoft Windows) - [CVE-2020-17090](https://cve.now/CVE-2020-17090.md): Microsoft Defender for Endpoint Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows) - [CVE-2020-17091](https://cve.now/CVE-2020-17091.md): Microsoft Teams Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Teams) - [CVE-2020-17086](https://cve.now/CVE-2020-17086.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Raw Image Extension) - [CVE-2020-17087](https://cve.now/CVE-2020-17087.md): Windows Kernel Local Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows) - [CVE-2020-17084](https://cve.now/CVE-2020-17084.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.5, Microsoft Exchange Server 2019 Cumulative Update · Micro… +1) - [CVE-2020-17085](https://cve.now/CVE-2020-17085.md): Microsoft Exchange Server Denial of Service Vulnerability (CVSS 6.2, Microsoft Exchange Server 2019 Cumulative Update · Micro… +1) - [CVE-2020-17082](https://cve.now/CVE-2020-17082.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Raw Image Extension) - [CVE-2020-17083](https://cve.now/CVE-2020-17083.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 5.5, Microsoft Exchange Server 2019 Cumulative Update · Micro… +1) - [CVE-2020-17079](https://cve.now/CVE-2020-17079.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Raw Image Extension) - [CVE-2020-17081](https://cve.now/CVE-2020-17081.md): Microsoft Raw Image Extension Information Disclosure Vulnerability (CVSS 5.5, Microsoft Raw Image Extension) - [CVE-2020-17076](https://cve.now/CVE-2020-17076.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17077](https://cve.now/CVE-2020-17077.md): Windows Update Stack Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17078](https://cve.now/CVE-2020-17078.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Raw Image Extension) - [CVE-2020-17074](https://cve.now/CVE-2020-17074.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17075](https://cve.now/CVE-2020-17075.md): Windows USO Core Worker Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17071](https://cve.now/CVE-2020-17071.md): Windows Delivery Optimization Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17073](https://cve.now/CVE-2020-17073.md): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17069](https://cve.now/CVE-2020-17069.md): Windows NDIS Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17070](https://cve.now/CVE-2020-17070.md): Windows Update Medic Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17066](https://cve.now/CVE-2020-17066.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Excel 2010 Service Pack) - [CVE-2020-17067](https://cve.now/CVE-2020-17067.md): Microsoft Excel Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-17068](https://cve.now/CVE-2020-17068.md): Windows GDI+ Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17064](https://cve.now/CVE-2020-17064.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-17065](https://cve.now/CVE-2020-17065.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-17062](https://cve.now/CVE-2020-17062.md): Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise) - [CVE-2020-17063](https://cve.now/CVE-2020-17063.md): Microsoft Office Online Spoofing Vulnerability (CVSS 6.8, Microsoft Office · Microsoft 365 Apps for Enterprise) - [CVE-2020-17060](https://cve.now/CVE-2020-17060.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…) - [CVE-2020-17061](https://cve.now/CVE-2020-17061.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft Share… +2) - [CVE-2020-17057](https://cve.now/CVE-2020-17057.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Server · Microsoft Windows) - [CVE-2020-17058](https://cve.now/CVE-2020-17058.md): Microsoft Browser Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer · Microsoft Edge) - [CVE-2020-17055](https://cve.now/CVE-2020-17055.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17056](https://cve.now/CVE-2020-17056.md): Windows Network File System Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17053](https://cve.now/CVE-2020-17053.md): Internet Explorer Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer) - [CVE-2020-17054](https://cve.now/CVE-2020-17054.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1) - [CVE-2020-17051](https://cve.now/CVE-2020-17051.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server · Microsoft Windows Server,) - [CVE-2020-17052](https://cve.now/CVE-2020-17052.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer · Microsoft Edge) - [CVE-2020-17047](https://cve.now/CVE-2020-17047.md): Windows Network File System Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server · Microsoft Windows) - [CVE-2020-17048](https://cve.now/CVE-2020-17048.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1) - [CVE-2020-17045](https://cve.now/CVE-2020-17045.md): Windows KernelStream Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17046](https://cve.now/CVE-2020-17046.md): Windows Error Reporting Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17042](https://cve.now/CVE-2020-17042.md): Windows Print Spooler Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server · Microsoft Windows) - [CVE-2020-17043](https://cve.now/CVE-2020-17043.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17044](https://cve.now/CVE-2020-17044.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17040](https://cve.now/CVE-2020-17040.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows) - [CVE-2020-17041](https://cve.now/CVE-2020-17041.md): Windows Print Configuration Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17037](https://cve.now/CVE-2020-17037.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17038](https://cve.now/CVE-2020-17038.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17035](https://cve.now/CVE-2020-17035.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17036](https://cve.now/CVE-2020-17036.md): Windows Function Discovery SSDP Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17033](https://cve.now/CVE-2020-17033.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17034](https://cve.now/CVE-2020-17034.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17031](https://cve.now/CVE-2020-17031.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17032](https://cve.now/CVE-2020-17032.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17028](https://cve.now/CVE-2020-17028.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17029](https://cve.now/CVE-2020-17029.md): Windows Canonical Display Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17030](https://cve.now/CVE-2020-17030.md): Windows MSCTF Server Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17026](https://cve.now/CVE-2020-17026.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17027](https://cve.now/CVE-2020-17027.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17024](https://cve.now/CVE-2020-17024.md): Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17025](https://cve.now/CVE-2020-17025.md): Windows Remote Access Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17020](https://cve.now/CVE-2020-17020.md): Microsoft Word Security Feature Bypass Vulnerability (CVSS 3.3, Microsoft Office · Microsoft 365 Apps for Enterprise +1) - [CVE-2020-17021](https://cve.now/CVE-2020-17021.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises)) - [CVE-2020-17017](https://cve.now/CVE-2020-17017.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 5.3, Microsoft SharePoint Enterprise Server · Microsoft Share… +2) - [CVE-2020-17018](https://cve.now/CVE-2020-17018.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises)) - [CVE-2020-17019](https://cve.now/CVE-2020-17019.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office 2010 Service Pack) - [CVE-2020-17015](https://cve.now/CVE-2020-17015.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.3, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-17016](https://cve.now/CVE-2020-17016.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…) - [CVE-2020-17013](https://cve.now/CVE-2020-17013.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17014](https://cve.now/CVE-2020-17014.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17011](https://cve.now/CVE-2020-17011.md): Windows Port Class Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17012](https://cve.now/CVE-2020-17012.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17007](https://cve.now/CVE-2020-17007.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2020-17010](https://cve.now/CVE-2020-17010.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17005](https://cve.now/CVE-2020-17005.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises)) - [CVE-2020-17006](https://cve.now/CVE-2020-17006.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics CRM 2015 (on-premises)) - [CVE-2020-17000](https://cve.now/CVE-2020-17000.md): Remote Desktop Protocol Client Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-17001](https://cve.now/CVE-2020-17001.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows) - [CVE-2020-17004](https://cve.now/CVE-2020-17004.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-16998](https://cve.now/CVE-2020-16998.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows) - [CVE-2020-16999](https://cve.now/CVE-2020-16999.md): Windows WalletService Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows) - [CVE-2020-16994](https://cve.now/CVE-2020-16994.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 7.3, Microsoft Azure Sphere) - [CVE-2020-16997](https://cve.now/CVE-2020-16997.md): Remote Desktop Protocol Server Information Disclosure Vulnerability (CVSS 7.7, Microsoft Windows) - [CVE-2020-16992](https://cve.now/CVE-2020-16992.md): Azure Sphere Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Azure Sphere) - [CVE-2020-16993](https://cve.now/CVE-2020-16993.md): Azure Sphere Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Azure Sphere) - [CVE-2020-16989](https://cve.now/CVE-2020-16989.md): Azure Sphere Elevation of Privilege Vulnerability (CVSS 5.4, Microsoft Azure Sphere) - [CVE-2020-16990](https://cve.now/CVE-2020-16990.md): Azure Sphere Information Disclosure Vulnerability (CVSS 6.2, Microsoft Azure Sphere) - [CVE-2020-16991](https://cve.now/CVE-2020-16991.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 7.3, Microsoft Azure Sphere) - [CVE-2020-16987](https://cve.now/CVE-2020-16987.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 7.3, Microsoft Azure Sphere) - [CVE-2020-16988](https://cve.now/CVE-2020-16988.md): Azure Sphere Elevation of Privilege Vulnerability (CVSS 6.9, Microsoft Azure Sphere) - [CVE-2020-16985](https://cve.now/CVE-2020-16985.md): Azure Sphere Information Disclosure Vulnerability (CVSS 6.2, Microsoft Azure Sphere) - [CVE-2020-16986](https://cve.now/CVE-2020-16986.md): Azure Sphere Denial of Service Vulnerability (CVSS 6.2, Microsoft Azure Sphere) - [CVE-2020-16983](https://cve.now/CVE-2020-16983.md): Azure Sphere Tampering Vulnerability (CVSS 5.7, Microsoft Azure Sphere) - [CVE-2020-16984](https://cve.now/CVE-2020-16984.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 7.3, Microsoft Azure Sphere) - [CVE-2020-16979](https://cve.now/CVE-2020-16979.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 5.3, Microsoft SharePoint Enterprise Server · Microsoft Share… +1) - [CVE-2020-16981](https://cve.now/CVE-2020-16981.md): Azure Sphere Elevation of Privilege Vulnerability (CVSS 6.1, Microsoft Azure Sphere) - [CVE-2020-16982](https://cve.now/CVE-2020-16982.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 6.1, Microsoft Azure Sphere) - [CVE-2020-16970](https://cve.now/CVE-2020-16970.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 8.1, Microsoft Azure Sphere) - [CVE-2020-16127](https://cve.now/CVE-2020-16127.md): accountsservice .pam\_environment infinite loop (CVSS 2.8, Freedesktop accountsservice) - [CVE-2020-16126](https://cve.now/CVE-2020-16126.md): accountsservice drops ruid, allows unprivileged users to send it signals (CVSS 3.3, Freedesktop accountsservice) - [CVE-2020-17049](https://cve.now/CVE-2020-17049.md): Kerberos KDC Security Feature Bypass Vulnerability (CVSS 6.6, Microsoft Windows Server · Microsoft Windows Server,) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-11-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.