Archive

14 July 2020

Vulnerabilities first published on this day (UTC), newest first.

← June 2020 2020 / July /14 August 2020 →

All Critical High Medium Low Exploited only Public exploit

194 results · Feed

Unscored —

CVE-2020-1481 EPSS 24%

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source co…

Microsoft Microsoft Visual Studio Code ESLint extension

Jul 14, 2020
High 7.5

CVE-2020-1469

Infinite loop in .Net Bond

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'.

Microsoft Bond 9.0.1 Bond.Core.CSharp NuGet

Jul 14, 2020
Unscored —

CVE-2020-1468

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1465

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.T…

Microsoft OneDrive for Windows Windows

Jul 14, 2020
Unscored —

CVE-2020-1463

An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1462

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based),…

Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Windows Browsers

Jul 14, 2020
Unscored —

CVE-2020-1461

An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary lo…

Microsoft Microsoft Security Essentials Microsoft Forefront Endpoint Protection Microsoft System Center Windows

Jul 14, 2020
Unscored —

CVE-2020-1458 EPSS 11%

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic li…

Microsoft Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems

Jul 14, 2020
Medium 5.4

CVE-2020-1456

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Jul 14, 2020
Medium 5.4

CVE-2020-1451

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Jul 14, 2020
Medium 5.4

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Jul 14, 2020
Medium 5.4

CVE-2020-1450

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

Jul 14, 2020
Unscored —

CVE-2020-1449

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source …

Microsoft Microsoft Office Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems

Jul 14, 2020
Unscored —

CVE-2020-1447 EPSS 11%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1448

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1445

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1446 EPSS 11%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jul 14, 2020
Unscored —

CVE-2020-1443

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web req…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Jul 14, 2020
Unscored —

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email me…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Jul 14, 2020
Unscored —

CVE-2020-1439 EPSS 20%

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

Jul 14, 2020
Unscored —

CVE-2020-1438

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1442

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, …

Microsoft Microsoft Office Online Server Microsoft Office Web Apps

Jul 14, 2020
Unscored —

CVE-2020-1436 EPSS 21%

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.F…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1437

An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles o…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1435 EPSS 14%

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1434

An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory,…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1432

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype fo…

Microsoft Internet Explorer 11 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1433

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka…

Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Windows Browsers

Jul 14, 2020
Unscored —

CVE-2020-1431

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1430

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit t…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1428

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1429

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1427

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1426

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1422

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1423

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Wind…

Microsoft Windows Server, version 2004 (Server Core installation) Windows 10 Version 2004 for x64-based Systems Windows 10 Version 2004 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1424

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1420

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1421 EPSS 75%

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020
Unscored —

CVE-2020-1419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, a…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Jul 14, 2020