Archive

11 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /11 March 2020 →

All Critical High Medium Low Exploited only Public exploit

210 results · Feed

Unscored —

CVE-2020-0722

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0721

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0723

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0720

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0719

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0717

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0716

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…

Microsoft Windows Windows Server Windows

Feb 11, 2020
Unscored —

CVE-2020-0715

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0714

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informat…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
High 7.5

CVE-2020-0713 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0712 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0711 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Windows Browsers NuGet

Feb 11, 2020
Unscored —

CVE-2020-0709

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevatio…

Microsoft Windows Windows Server Windows

Feb 11, 2020
High 7.5

CVE-2020-0710 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
Unscored —

CVE-2020-0708 EPSS 14%

A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerabi…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0706

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Windows Browsers

Feb 11, 2020
Unscored —

CVE-2020-0705

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperl…

Microsoft Windows Windows Server Windows

Feb 11, 2020
Unscored —

CVE-2020-0703

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To ex…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0704

An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To e…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0701

An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles obj…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0702

A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security…

Microsoft Microsoft Surface Hub

Feb 11, 2020
Unscored —

CVE-2020-0696

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of …

Microsoft Microsoft Office Office 365 ProPlus Microsoft Outlook

Feb 11, 2020
Unscored —

CVE-2020-0697

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who succes…

Microsoft Office 365 ProPlus

Feb 11, 2020
Unscored —

CVE-2020-0698

An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0695

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications corre…

Microsoft Office Online Server

Feb 11, 2020
Medium 5.4

CVE-2020-0694

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Feb 11, 2020
Unscored —

CVE-2020-0692

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Cumulative Update 14 Microsoft Exchange Server 2019 Cumulative Update 3

Feb 11, 2020
Medium 5.4

CVE-2020-0693

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Feb 11, 2020
High 8.8

CVE-2020-0688 Exploited · Ransomware Public exploit EPSS 100%

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …

Microsoft Microsoft Exchange Server 2013 Microsoft Exchange Server 2019 Cumulative Update 3 Microsoft Exchange Server 2016 Cumulative Update 14

Feb 11, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-0689

A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulne…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0691

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …

Microsoft Windows Server, version 1909 (Server Core installation) Windows Windows Server Windows

Feb 11, 2020
Unscored —

CVE-2020-0686

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0685

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Se…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0682

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects i…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
High 7.8

CVE-2020-0683 Exploited Public exploit

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-0680

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects i…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0681 EPSS 11%

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious s…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0679

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects i…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020
Unscored —

CVE-2020-0677

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to prope…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Feb 11, 2020