|
220881
|
6.7 |
MEDIUM
Local
|
microsoft
|
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019
|
A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2020-0689
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220882
|
7.8 |
HIGH
Local
|
microsoft
|
office_365_proplus
|
An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the…
|
NVD-CWE-noinfo
|
CVE-2020-0697
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220883
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
|
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE I…
|
NVD-CWE-noinfo
|
CVE-2020-0691
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220884
|
8.8 |
HIGH
Network
|
microsoft
|
exchange_server
|
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
|
CWE-287
Improper Authentication
|
CVE-2020-0688
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220885
|
7.8 |
HIGH
Local
|
microsoft
|
windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
|
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique f…
|
CWE-269
Improper Privilege Management
|
CVE-2020-0686
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220886
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10
windows_server_2016
windows_server_2019
|
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
|
NVD-CWE-noinfo
|
CVE-2020-0685
|
2024-11-21 13:54 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220887
|
7.8 |
HIGH
Local
|
google
|
android
|
In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-0417
|
2024-11-21 13:53 |
2021-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220888
|
7.8 |
HIGH
Local
|
intel
|
graphics_drivers
|
Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an authenticated user to potentially enable escalation of priv…
|
NVD-CWE-Other
|
CVE-2020-0544
|
2024-11-21 13:53 |
2021-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220889
|
4.4 |
MEDIUM
Local
|
intel
|
ethernet_controller_i210_firmware
|
Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via lo…
|
NVD-CWE-noinfo
|
CVE-2020-0525
|
2024-11-21 13:53 |
2021-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220890
|
5.5 |
MEDIUM
Local
|
intel
|
ethernet_controller_i210_firmware
|
Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of s…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-0524
|
2024-11-21 13:53 |
2021-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
