CVEs published December 9, 2020
130 CVEs were published on December 9, 2020: 5 critical, 47 high. 1 is now in CISA KEV.
- Published
- 130
- Critical
- 5
- High
- 47
- Medium
- 26
- Low
- 3
- Unrated
- 49
- Now in CISA KEV
- 1
- Fix available
- 103
Most affected products
- Microsoft Windows
- 21
- Mozilla Firefox · Mozilla Thunderbird
- 11
- Mozilla Firefox
- 9
- Microsoft SharePoint Enterprise Server · Microsoft Share… +2
- 5
- Microsoft 365 Apps for Enterprise · Microsoft Excel 2010… +3
- 4
- Microsoft Exchange Server 2013 Cumulative Update · Micro… +1
- 4
- SAP SE SAP NetWeaver AS JAVA
- 3
- SAP SE SAP Solution Manager
- 3
- Apache Software Foundation Apache NuttX
- 2
- Canonical aptdaemon
- 2
Critical 5
- CVE-2020-17142Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2020-17132Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2020-26838SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows aSAP SE SAP Business Warehouse · SAP SE SAP BW4HANA
- CVE-2020-26831SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crysSAP SE SAP BusinessObjects BI Platform
- CVE-2020-26829SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processeSAP SE SAP NetWeaver AS JAVA
High 47
- CVE-2020-17156Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2020-17158Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 for Finance and Operations
- CVE-2020-17159Visual Studio Code Java Extension Pack Remote Code Execution VulnerabilityMicrosoft Visual Studio Code Language Support for Java Exte…
- CVE-2020-17152Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics 365 for Finance and Operations
- CVE-2020-17148Visual Studio Code Remote Development Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code Remote - SSH Extension
- CVE-2020-17150Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code TS-Lint Extension
- CVE-2020-17147Dynamics CRM Webclient Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2020-17143Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2020-17144Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2010 Service Pack 3 Update Rollup
- CVE-2020-17140Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17141Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2020-17139Windows Overlay Filter Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-17136Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17137DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17134Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17129Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +3
- CVE-2020-17127Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel 2010 Service Pack
- CVE-2020-17128Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +4
- CVE-2020-17124Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2020-17125Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +3
- CVE-2020-17122Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2010 Service Pack · Microsoft Office We… +1
- CVE-2020-17123Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +3
- CVE-2020-17121Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17118Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17115Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17103Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17096Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-17095Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2020-17089Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17092Windows Network Connections Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17002Azure SDK for C Security Feature Bypass VulnerabilityMicrosoft azure-c-shared-utility · Microsoft azure-uamqp… +4
- CVE-2020-16964Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16971Azure SDK for Java Security Feature Bypass VulnerabilityMicrosoft Azure SDK · com.microsoft.azure:azure-eventhubs +1
- CVE-2020-16961Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16962Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16963Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16959Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16960Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-16958Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-10143Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\.Macrium Reflect
- CVE-2020-2049Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalationPalo Alto Networks Cortex XDR Agent
- CVE-2020-7776Cross-site Scripting (XSS)phpoffice/phpspreadsheet · phpoffice/phpexcel
- CVE-2020-7787Improper Authenticationreact-adal
- CVE-2020-26837SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can expSAP SE SAP Solution Manager
- CVE-2020-26832SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2SAP SE SAP NetWeaver AS ABAP · SAP SE SAP S4 HANA
- CVE-2020-26261user-readable api tokens in systemd unitsjupyterhub systemdspawner · jupyterhub-systemdspawner
- CVE-2020-26830SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated uSAP SE SAP Solution Manager
Medium, low and unrated 78
- CVE-2020-17153Microsoft Edge for Android Spoofing VulnerabilityMicrosoft Edge for Android
- CVE-2020-17145Azure DevOps Server and Team Foundation Services Spoofing VulnerabilityMicrosoft Azure DevOps Server 2019 Update · Microsoft Az… +3
- CVE-2020-17138Windows Error Reporting Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17133Microsoft Dynamics Business Central/NAV Information Disclosure VulnerabilityMicrosoft Dynamics NAV
- CVE-2020-17135Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server 2019 Update · Microsoft Azure…
- CVE-2020-17131Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2020-17130Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel
- CVE-2020-17126Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2010… +3
- CVE-2020-17120Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-17119Microsoft Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2020-17117Microsoft Exchange Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2020-17099Windows Lock Screen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2020-17097Windows Digital Media Receiver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17098Windows GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-17094Windows Error Reporting Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2020-16996Kerberos Security Feature Bypass VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2020-7339Database Security(DBS)-Use of a Broken or Risky Cryptographic AlgorithmMcAfee Database Security
- CVE-2020-29259Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
- CVE-2020-29258Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.
- CVE-2020-29257Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
- CVE-2020-16600A Use After Free vulnerability exists in Artifex Software, Inc.
- CVE-2020-16599A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.3
- CVE-2020-16593A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.3
- CVE-2020-16592A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstra
- CVE-2020-16591A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_t
- CVE-2020-16590A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as dem
- CVE-2020-25499TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'.
- CVE-2020-26257Denial of service attack via incorrect parameters to federation APIsmatrix-org synapse · matrix-synapse
- CVE-2020-28086pass through 1.7.3 has a possibility of using a password for an unintended resource.
- CVE-2020-2020Cortex XDR Agent: Exceptional condition denial-of-service (DoS)Palo Alto Networks Cortex XDR Agent
- CVE-2020-29660A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
- CVE-2020-29661A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
- CVE-2020-17529Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP headerApache Software Foundation Apache NuttX
- CVE-2020-17528Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent lengthApache Software Foundation Apache NuttX
- CVE-2020-26836SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulneSAP SE SAP Solution Manager
- CVE-2020-26835SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input maliciouSAP SE SAP NetWeaver AS ABAP
- CVE-2020-26834SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication.SAP SE SAP HANA Database
- CVE-2020-26826Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including scripSAP SE SAP NetWeaver AS JAVA
- CVE-2020-26828SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type.SAP SE SAP Disclosure Management.
- CVE-2020-26816SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWSAP SE SAP NetWeaver AS JAVA
- CVE-2020-26260Server Side Request Forgery in BookStackBookStackApp BookStack
- CVE-2020-29659A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by
- CVE-2020-25199A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when processing project fiWECON Technology Co., Ltd LeviStudioU
- CVE-2020-23520imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.
- CVE-2020-7337Incorrect Permission Assignment for Critical ResourceMcAfee VirusScan Enterprise
- CVE-2020-29657In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.
- CVE-2020-29655An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108.
- CVE-2020-29656An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108.
- CVE-2020-29651A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to py
- CVE-2020-27349aptdaemon performed policykit permissions checks too lateCanonical aptdaemon
- CVE-2020-16128Aptdaemon error messages disclosed file existence to unprivileged users via dbus propertiesCanonical aptdaemon
- CVE-2020-10146Microsoft Teams displayName stored cross-site scripting vulnerabilityMicrosoft Teams
- CVE-2020-26970When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one bMozilla Thunderbird
- CVE-2020-26969Mozilla developers reported memory safety bugs present in Firefox 82.Mozilla Firefox
- CVE-2020-26968Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4.Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-26967When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elemeMozilla Firefox
- CVE-2020-26966Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-26965Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typedMozilla Firefox · Mozilla Thunderbird
- CVE-2020-26964If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could Mozilla Firefox
- CVE-2020-26963Repeated calls to the history and location interfaces could have been used to hang the browser.Mozilla Firefox
- CVE-2020-26962Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated.Mozilla Firefox
- CVE-2020-26961When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming fMozilla Firefox · Mozilla Thunderbird
- CVE-2020-26960If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potenMozilla Firefox · Mozilla Thunderbird
- CVE-2020-26959During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruMozilla Firefox · Mozilla Thunderbird
- CVE-2020-26958Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker.Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-26957OneCRL was non-functional in the new Firefox for Android due to a missing service initialization.Mozilla Firefox
- CVE-2020-26956In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS.Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-26955When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operaMozilla Firefox
- CVE-2020-26954When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed deMozilla Firefox
- CVE-2020-26953It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishMozilla Firefox · Mozilla Thunderbird
- CVE-2020-26952Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash whMozilla Firefox
- CVE-2020-26951A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization.Mozilla Firefox · Mozilla Thunderbird
- CVE-2020-26950In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condiMozilla Firefox · Mozilla Thunderbird
- CVE-2020-25627The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk.Moodle · moodle/moodle
- CVE-2020-27614AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and all
- CVE-2020-16587A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartI
- CVE-2020-16588A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a de
- CVE-2020-16589A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a