CVE-2020-1275

Technical details for CVE-2020-1275 are not publicly available in the provided documents. Monitor for updates from official advisories; no confirmed affected products, impact, or remediation are stated here.

CVE-2020-1273

Technical details for CVE-2020-1273 are not provided in the connected documents. Monitor official advisories for updates; no validated exploit, affected products, or remediation information are included here.

CVE-2020-1274

Technical details for CVE-2020-1274 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and EUVD entries for any new information.

CVE-2020-1269

Technical details for CVE-2020-1269 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2020-1266

CVE-2020-1266 is a Windows kernel elevation-of-privilege vulnerability. The description attributes the issue to improper handling of objects in memory, enabling local privilege escalation with high impact (local access, minimal authentication). The provided metrics show a high base score (CVSS v3...

CVE-2020-1264

Technical details for CVE-2020-1264 are not publicly available in the provided documents; no affected products, impact, exploit information, or remediation are specified here. Monitor for updates.

CVE-2020-1262

Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1246

Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2020-1237

Technical details for CVE-2020-1237 are not publicly available in the provided documents. The connected EUVD entries do not supply product/version/impact specifics. Monitor for updates.

CVE-2020-1206

CVE-2020-1206 is an information disclosure vulnerability in SMBv3 (Microsoft Server Message Block 3.1.1) that affects the SMBv3 client/server handling of certain requests. The connected documents describe an information disclosure in SMBv3 and note that attackers can chain SMBleed with SMBGhost t...

CVE-2020-0986

Technical details about CVE-2020-0986 are not publicly available in the provided connected documents. Please monitor for updates; current materials mention malware references in related EUVD entries but do not disclose affected products, vulnerable components, impact, or fixes.

CVE-2020-9844

CVE-2020-9844 is a double free vulnerability in the Wi-Fi component of Apple's operating systems. A remote attacker can exploit it to cause unexpected system termination or kernel memory corruption , rated CVSS 7.5 (High) with a network attack vector requiring no privileges or user interaction. T...

CVE-2020-9818

CVE-2020-9818 describes an out‑of‑bounds write in the Mail component of Apple iOS/iPadOS/watchOS. Affected versions: iOS 13.5 and iPadOS 13.5, iOS 12.4.7, and watchOS 6.2.5. Root cause: improved bounds checking in handling of malicious mail messages may prevent memory corruption. Impact as stated...

CVE-2020-9819

CVE-2020-9819 is a memory consumption issue in Apple’s Mail processing that can lead to heap corruption when handling a maliciously crafted mail message. Public sources confirm the vulnerability affects Apple platforms and was fixed in specific updates: iOS 13.5, iPadOS 13.5, iOS 12.4.7, watchOS ...

CVE-2020-13965

CVE-2020-13965 concerns Roundcube Webmail prior to 1.3.12 and prior to 1.4.5, where an XSS can be triggered via a malicious XML attachment because text/xml is among allowed preview types. The vulnerability affects Roundcube Webmail versions before these fixed releases; remediation is to upgrade t...

CVE-2020-17008

CVE-2020-17008 is a Windows splwow64.exe elevation-of-privilege issue where the patch for CVE-2020-0986 was incomplete, enabling a bypass and use of an exploit chain. A Google Project Zero write-up and multiple sources indicate the fix didn’t fully remediate the vulnerability, and Project Zero pr...

CVE-2020-12800

CVE-2020-12800 affects the WordPress plugin “Drag and Drop Multi File Upload – Contact Form 7” (prior to 1.3.3.3). The underlying flaw is in the file upload handling, where the allowed_type/filter can be bypassed by using a php% value, enabling uploading a .php% file and enabling remote code exec...

CVE-2020-9859

CVE-2020-9859 is an Apple kernel code execution vulnerability triggered by a memory consumption issue. Affected products include iOS 13.5.1/iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, and watchOS 6.2.6. Root cause: memory handling flaw that could allow an application t...

CVE-2017-16238

CVE-2017-16238 is a buffer-checking vulnerability in the Vir.IT eXplorer driver viaglt64.sys (vulnerable driver) that can be abused to gain an arbitrary kernel write primitive. Public analysis ties CVE-2017-16238 to the Viraglt64.sys driver and reports an exploitation attempt in the wild (ZINC ca...

CVE-2017-1135

Technical details for CVE-2017-1135 are not publicly available in the provided documents. Monitor for updates from the original entry and connected sources; no affected products, impact, or remediation information can be confirmed from the supplied data.