microsoft vulnerabilities, newest first, page 196
Filter
- 5.4CVE-2020-16993EPSS 0.8%
Azure Sphere Elevation of Privilege Vulnerability
- 7.5CVE-2020-16992EPSS 1.4%
Azure Sphere Elevation of Privilege Vulnerability
- 7.3CVE-2020-16991EPSS 1.7%
Azure Sphere Unsigned Code Execution Vulnerability
- 6.2CVE-2020-16990EPSS 1.5%
Azure Sphere Information Disclosure Vulnerability
- 5.4CVE-2020-16989EPSS 0.7%
Azure Sphere Elevation of Privilege Vulnerability
- 6.9CVE-2020-16988EPSS 0.7%
Azure Sphere Elevation of Privilege Vulnerability
- 7.3CVE-2020-16987EPSS 1.3%
Azure Sphere Unsigned Code Execution Vulnerability
- 6.2CVE-2020-16986EPSS 1.3%
Azure Sphere Denial of Service Vulnerability
- 6.2CVE-2020-16985EPSS 1.7%
Azure Sphere Information Disclosure Vulnerability
- 7.3CVE-2020-16984EPSS 1.3%
Azure Sphere Unsigned Code Execution Vulnerability
- 5.7CVE-2020-16983EPSS 0.7%
Azure Sphere Tampering Vulnerability
- 6.1CVE-2020-16982EPSS 1.2%
Azure Sphere Unsigned Code Execution Vulnerability
- 6.1CVE-2020-16981EPSS 0.7%
Azure Sphere Elevation of Privilege Vulnerability
- 5.3CVE-2020-16979EPSS 3.1%
Microsoft SharePoint Information Disclosure Vulnerability
- 8.1CVE-2020-16970EPSS 1.4%
Azure Sphere Unsigned Code Execution Vulnerability
- 8.8CVE-2020-16009KEVEPSS 48%
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 7.8CVE-2020-1243EPSS 0.9%
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the vulnerability, an attacker who already ha…
- 7.8CVE-2020-1167EPSS 4.7%
<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.</p> <p>To exp…
- 8.8CVE-2020-1080EPSS 0.9%
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target ope…
- 7.8CVE-2020-1047EPSS 0.9%
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target ope…
- 7.8CVE-2020-17023EPSS 4.6%
<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of …
- 7.8CVE-2020-17022EPSS 3.9%
<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the v…
- 7.8CVE-2020-17003EPSS 4.2%
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a victim system.</p> <p>The security update…
- 7.8CVE-2020-16995EPSS 1.0%
<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vulnerability could execute code with elevated privileges.</p> <p>To exploit this v…
- 7.8CVE-2020-16980EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.</p> <p>To exploit the vul…
- 5.4CVE-2020-16978EPSS 1.4%
<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability b…
- 7.0CVE-2020-16977EPSS 3.4%
<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current …
- 7.8CVE-2020-16976EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker co…
- 7.8CVE-2020-16975EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker co…
- 7.8CVE-2020-16974EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker co…
- 7.8CVE-2020-16973EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker co…
- 7.8CVE-2020-16972EPSS 0.9%
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker co…
- 7.1CVE-2020-16969EPSS 2.7%
<p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.</…
- 7.8CVE-2020-16968EPSS 4.9%
<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. …
- 7.8CVE-2020-16967EPSS 4.2%
<p>A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. …
- 7.8CVE-2020-16957EPSS 3.9%
<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim s…
- 5.4CVE-2020-16956EPSS 1.4%
<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability b…
- 7.8CVE-2020-16955EPSS 3.5%
<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this v…
- 7.8CVE-2020-16954EPSS 3.3%
<p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of …
- 6.5CVE-2020-16953EPSS 3.8%
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the use…
- 8.6CVE-2020-16952ExploitEPSS 71%
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …
- 8.6CVE-2020-16951EPSS 1.4%
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …
- 5.0CVE-2020-16950EPSS 4.2%
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the use…
- 4.7CVE-2020-16949EPSS 3.0%
<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against…
- 6.5CVE-2020-16948EPSS 3.8%
<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the use…
- 7.5CVE-2020-16947EPSS 34%
<p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of…
- 8.7CVE-2020-16946EPSS 1.6%
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by…
- 8.7CVE-2020-16945EPSS 1.7%
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by…
- 8.7CVE-2020-16944EPSS 1.8%
<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.</p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafte…
- 6.5CVE-2020-16943EPSS 1.1%
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerabi…