Archive
March 2020
Vulnerabilities first published in this month (UTC), newest first.
1,762 results · Feed
-
High 7.5
ChakraCore information disclosure vulnerability
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user’s computer or data.To exploit the vulnerability, an attacker must kno…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standar…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.
-
Unscored —
An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, a…
-
Unscored —
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle pa…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sa…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Critical 10.0
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …
KEV Feb 10, 2022 -
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles f…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory…
-
High 7.8
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…
KEV Jan 28, 2022 -
Unscored —
A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard lin…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symli…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handl…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handl…
-
Unscored —
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memo…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operatio…
-
Unscored —
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this v…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this v…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this v…
-
High 7.5
Out-of-bounds write in ChakraCore
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2…