|
208911
|
6.5 |
MEDIUM
Network
|
microsoft
|
sharepoint_foundation sharepoint_enterprise_server sharepoint_server
|
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request f…
|
CWE-352
Origin Validation Error
|
CVE-2020-1103
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208912
|
8.8 |
HIGH
Network
|
microsoft
|
sharepoint_enterprise_server sharepoint_server
|
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-1102
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208913
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2020-1096
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208914
|
7.5 |
HIGH
Network
|
microsoft
|
internet_explorer
|
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-103…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-1093
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208915
|
7.5 |
HIGH
Network
|
microsoft
|
internet_explorer
|
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-1092
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208916
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…
|
NVD-CWE-noinfo
|
CVE-2020-1090
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208917
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is…
|
NVD-CWE-noinfo
|
CVE-2020-1088
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208918
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-…
|
NVD-CWE-noinfo
|
CVE-2020-1087
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208919
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…
|
NVD-CWE-noinfo
|
CVE-2020-1086
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208920
|
5.5 |
MEDIUM
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values.An attacker who successfully exploited this vulnerability coul…
|
CWE-20
Improper Input Validation
|
CVE-2020-1084
|
2024-11-21 14:09 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|