Microsoft Security Vulnerabilities

CVE-2020-17126

Microsoft Excel Information Disclosure Vulnerability

CVE-2020-17127

Microsoft Excel Remote Code Execution Vulnerability

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

CVE-2020-17130

Microsoft Excel Security Feature Bypass Vulnerability

CVE-2020-17131

Chakra Scripting Engine Memory Corruption Vulnerability

CVE-2020-17132

Microsoft Exchange Remote Code Execution Vulnerability

CVE-2020-17133

Microsoft Dynamics Business Central/NAV Information Disclosure

CVE-2020-17134

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2020-17135

Azure DevOps Server Spoofing Vulnerability

CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2020-17137

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2020-17138

Windows Error Reporting Information Disclosure Vulnerability

CVE-2020-17139

Windows Overlay Filter Security Feature Bypass Vulnerability

CVE-2020-17140

Windows SMB Information Disclosure Vulnerability

CVE-2020-17141

Microsoft Exchange Remote Code Execution Vulnerability

CVE-2020-17142

Microsoft Exchange Remote Code Execution Vulnerability

CVE-2020-17143

Microsoft Exchange Server Information Disclosure Vulnerability

CVE-2020-17144

Microsoft Exchange Remote Code Execution Vulnerability

CVE-2020-17145

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

CVE-2020-17150

Visual Studio Code Remote Code Execution Vulnerability

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

CVE-2020-17153

Microsoft Edge for Android Spoofing Vulnerability

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability

CVE-2020-17163

Visual Studio Code Python Extension Remote Code Execution Vulnerability

CVE-2020-19725

There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.

CVE-2020-23315

There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802...

CVE-2020-26233

Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will first clone the top-level repository and ...

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

CVE-2020-35608

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses t...

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.

CVE-2020-36327

Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that i...

CVE-2020-8567

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

CVE-2020-8927

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli libr...

CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability

CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

CVE-2021-1638

Windows Bluetooth Security Feature Bypass Vulnerability

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

CVE-2021-1640

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2021-1641

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2021-1642

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

CVE-2021-1643

HEVC Video Extensions Remote Code Execution Vulnerability

CVE-2021-1644

HEVC Video Extensions Remote Code Execution Vulnerability