Archive

9 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /9 January 2021 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

High 8.4

CVE-2020-17144 Exploited Public exploit EPSS 37%

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31

Dec 9, 2020
KEV Nov 3, 2021
High 7.8

CVE-2020-17136 Public exploit EPSS 14%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
Critical 9.1

CVE-2020-17132 Public exploit EPSS 90%

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 7 Microsoft Exchange Server 2016 Cumulative Update 18

Dec 9, 2020
High 7.0

CVE-2020-17103 Public exploit EPSS 30%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
Unscored —

CVE-2020-29661 Public exploit

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allow…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 9, 2020
Unscored —

CVE-2020-26950 Public exploit EPSS 42%

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Dec 9, 2020
Medium 6.1

CVE-2020-25627 Public exploit

Moodle stored Cross-site Scripting (XSS)

The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

moodle/moodle moodle Web / CMS Ubuntu Packagist

Dec 9, 2020