Microsoft Patch Tuesday — June 2020
Tuesday, 9 June 2020
- Vulnerabilities
- 129
- Critical
- 0
- High
- 2
- Zero-days
- 0
- Public exploit
- 4
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
Public exploit code 4
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2020-1313 Public exploit An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrato…EPSS 39%
-
Unscored
CVE-2020-1206 Public exploit An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows…EPSS 11%
-
Unscored
CVE-2020-1283 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 8.8%
-
Unscored
CVE-2020-1301 Public exploit A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB R…EPSS 44%
All vulnerabilities 129
High2 ShowHide
-
High 7.8
CVE-2020-0986 Exploited An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V…EPSS 16%
- High 8.1 EPSS 8.9%
Medium6 ShowHide
-
Medium 5.4
CVE-2020-1177 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Medium 5.4
CVE-2020-1183 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Medium 5.4
CVE-2020-1297 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Medium 5.4
CVE-2020-1298 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Medium 5.4
CVE-2020-1318 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Medium 5.4
CVE-2020-1320 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
Unscored121 ShowHide
-
Unscored
CVE-2020-1313 Public exploit An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrato…EPSS 39%
-
Unscored
CVE-2020-1206 Public exploit An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows…EPSS 11%
-
Unscored
CVE-2020-1283 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.EPSS 8.8%
-
Unscored
CVE-2020-1301 Public exploit A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests, aka 'Windows SMB R…EPSS 44%
- Unscored
- Unscored
-
Unscored
CVE-2020-1120 A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experien…EPSS 1.3%
-
Unscored
CVE-2020-1148 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, a…EPSS 1.4%
-
Unscored
CVE-2020-1160 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Comp…EPSS 1.6%
- Unscored
- Unscored
-
Unscored
CVE-2020-1170 An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker w…EPSS 1.6%
-
Unscored
CVE-2020-1178 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an aff…EPSS 3.1%
-
Unscored
CVE-2020-1181 A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Mic…EPSS 69%
-
Unscored
CVE-2020-1194 A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.EPSS 1.3%
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2020-1207 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation…EPSS 1.2%
-
Unscored
CVE-2020-1208 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 15%
-
Unscored
CVE-2020-1209 An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service El…EPSS 3.4%
-
Unscored
CVE-2020-1211 An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platfor…EPSS 3.1%
-
Unscored
CVE-2020-1212 An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would firs…EPSS 3.5%
-
Unscored
CVE-2020-1213 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.4%
-
Unscored
CVE-2020-1214 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 8.2%
-
Unscored
CVE-2020-1215 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 8.2%
-
Unscored
CVE-2020-1216 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.4%
-
Unscored
CVE-2020-1217 An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulne…EPSS 4.5%
-
Unscored
CVE-2020-1219 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit…EPSS 19%
-
Unscored
CVE-2020-1220 A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) …EPSS 1.9%
- Unscored
-
Unscored
CVE-2020-1223 A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker w…EPSS 8.2%
-
Unscored
CVE-2020-1225 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 17%
-
Unscored
CVE-2020-1226 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 17%
-
Unscored
CVE-2020-1229 A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlo…EPSS 3.9%
-
Unscored
CVE-2020-1230 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.3%
-
Unscored
CVE-2020-1231 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne…EPSS 3.5%
-
Unscored
CVE-2020-1232 An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnera…EPSS 6%
-
Unscored
CVE-2020-1233 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne…EPSS 3.4%
-
Unscored
CVE-2020-1234 An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker wou…EPSS 4.8%
-
Unscored
CVE-2020-1235 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne…EPSS 3.1%
-
Unscored
CVE-2020-1236 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 12%
-
Unscored
CVE-2020-1237 An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnera…EPSS 3.2%
-
Unscored
CVE-2020-1238 A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil…EPSS 7.2%
-
Unscored
CVE-2020-1239 A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerabil…EPSS 6.1%
-
Unscored
CVE-2020-1241 A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authen…EPSS 3.3%
-
Unscored
CVE-2020-1242 An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnera…EPSS 3.9%
-
Unscored
CVE-2020-1244 A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experien…EPSS 3.1%
- Unscored
- Unscored
-
Unscored
CVE-2020-1248 A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E…EPSS 14%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2020-1255 An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, …EPSS 3.4%
- Unscored
- Unscored
-
Unscored
CVE-2020-1259 A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Ser…EPSS 3.1%
-
Unscored
CVE-2020-1260 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.4%
-
Unscored
CVE-2020-1261 An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Dis…EPSS 1.3%
- Unscored
-
Unscored
CVE-2020-1263 An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Dis…EPSS 1.3%
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2020-1268 An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information Disclosure Vulnera…EPSS 1.3%
-
Unscored
CVE-2020-1269 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V…EPSS 1%
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2020-1280 An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows Bluetooth Service Elevatio…EPSS 3.1%
-
Unscored
CVE-2020-1281 A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerabi…EPSS 15%
-
Unscored
CVE-2020-1282 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne…EPSS 3.4%
-
Unscored
CVE-2020-1284 A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3…EPSS 7%
-
Unscored
CVE-2020-1286 A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerabi…EPSS 12%
-
Unscored
CVE-2020-1287 An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Pri…EPSS 3.1%
-
Unscored
CVE-2020-1289 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, a…EPSS 1.5%
-
Unscored
CVE-2020-1290 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili…EPSS 1.3%
-
Unscored
CVE-2020-1291 An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connecti…EPSS 3.1%
-
Unscored
CVE-2020-1292 An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aka 'OpenSSH for Win…EPSS 3.2%
- Unscored
-
Unscored
CVE-2020-1294 An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Pri…EPSS 3.4%
-
Unscored
CVE-2020-1295 An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.EPSS 3%
-
Unscored
CVE-2020-1296 A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & feedback Informatio…EPSS 1.3%
-
Unscored
CVE-2020-1299 A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successful…EPSS 15%
-
Unscored
CVE-2020-1300 A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an attacker would have…EPSS 60%
- Unscored
-
Unscored
CVE-2020-1304 An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulne…EPSS 3.4%
-
Unscored
CVE-2020-1305 An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Se…EPSS 3.2%
- Unscored
-
Unscored
CVE-2020-1307 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V…EPSS 3.9%
-
Unscored
CVE-2020-1309 An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would firs…EPSS 3.8%
- Unscored
-
Unscored
CVE-2020-1311 An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model Elevation of Privil…EPSS 3.2%
- Unscored
-
Unscored
CVE-2020-1314 An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clie…EPSS 3.1%
-
Unscored
CVE-2020-1315 An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulne…EPSS 3.9%
- Unscored
-
Unscored
CVE-2020-1317 An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.EPSS 4.4%
-
Unscored
CVE-2020-1321 A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code…EPSS 12%
-
Unscored
CVE-2020-1322 An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Inform…EPSS 5.6%
-
Unscored
CVE-2020-1323 An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has …EPSS 2.2%
- Unscored
-
Unscored
CVE-2020-1327 A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnera…EPSS 1.9%
-
Unscored
CVE-2020-1329 A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing Vulnerabil…EPSS 2.7%
-
Unscored
CVE-2020-1331 A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM ins…EPSS 1.3%
- Unscored
-
Unscored
CVE-2020-1340 A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofing Vulnerability'.EPSS 1.6%
-
Unscored
CVE-2020-1343 An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Sh…EPSS 2.9%
-
Unscored
CVE-2020-1348 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…EPSS 5.4%