CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'...

CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'...

CVE-2020-0618

CVE-2020-0618 affects Microsoft SQL Server Reporting Services (SSRS) and is a remote code execution vulnerability caused by improper handling of page requests, with deserialization of viewstate cited in some sources. The vulnerability can allow code execution on the Report Server service account,...

Windows Error Reporting Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...

Windows Error Reporting Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have t...

KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020

KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...

KB4532097 - Description of the security update for SQL Server 2016 SP2 GDR: February 11, 2020

KB4532097 - Description of the security update for SQL Server 2016 SP2 GDR: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...

KB4532095 - Description of the security update for SQL Server 2014 SP3 GDR: February 11, 2020

KB4532095 - Description of the security update for SQL Server 2014 SP3 GDR: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could...

KB4535288 - Description of the security update for SQL Server 2014 SP3 CU4: February 11, 2020

KB4535288 - Description of the security update for SQL Server 2014 SP3 CU4: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could...

Windows Error Reporting Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...

KB4532098 - Description of the security update for SQL Server 2012 SP4 GDR: February 11, 2020

KB4532098 - Description of the security update for SQL Server 2012 SP4 GDR: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could...

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...

Vulnerability fixed in Microsoft SQL Server Reporting Services

There is a vulnerability in Microsoft SQL Server Reporting Services SSRS. The vulnerability exists in the Reporting Service instance due to improper processing of page requests. If successfully exploited, the vulnerability allows an authenticated remote malicious person to execute arbitrary execu...

PT-2020-1616 · Microsoft · Sql Server Reporting Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Reporting Services versions 2012 through 2016 Description: A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute...

KB4537794: Windows Server 2012 February 2020 Security Update

The remote Windows host is missing security update 4537794 or cumulative update 4537814. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

CVE-2020-0753

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files, aka ‘Windows Error Reporting Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0754. Recent assessments: tekwizz123 at February 23, 2020 6:25pm UTC reported:...

CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka ‘Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability’. Recent assessments: wvu-r7 at February 18, 2020 6:51pm UTC reported: Although the...

The vulnerability of the SQL Server Reporting Services reporting system’s server side components, related to the lack of measures to sanitize input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the SQL Server Reporting Services reporting system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2020-0754

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files, aka ‘Windows Error Reporting Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0753. Recent assessments: tekwizz123 at February 23, 2020 7:58pm UTC reported:...