Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Unscored —
A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka …
-
Unscored —
An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in pla…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially cra…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'M…
-
Unscored —
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Az…
-
Unscored —
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain …
-
Unscored —
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,…
-
Unscored —CVE-2020-1321 EPSS 12%
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in m…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation …
-
Unscored —
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Intern…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to pro…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file ope…
-
Unscored —
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certai…
-
Unscored —
An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Co…
-
Unscored —
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit th…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in …
-
Unscored —
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certai…
-
Unscored —
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server hand…
-
Unscored —CVE-2020-1300 EPSS 60%
A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit t…
-
Unscored —CVE-2020-1299 EPSS 15%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —
A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'W…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privileg…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka…
-
Unscored —
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles f…
-
Unscored —
An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to conf…
-
Unscored —
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…