Skip to main content
CVE-2020-1035 May 21, 23:15 HIGH PATCH This Week

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.5
EPSS
7.2%
CVE-2020-1060 May 21, 23:15 HIGH PATCH This Week

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.5
EPSS
7.1%
CVE-2020-1058 May 21, 23:15 HIGH PATCH This Week

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.5
EPSS
7.1%
CVE-2020-1092 May 21, 23:15 HIGH PATCH This Week

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft
NVD VulDB
CVSS 3.1
7.5
EPSS
6.9%
CVE-2020-10738 May 21, 16:15 HIGH PATCH This Week

A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Moodle
NVD
CVSS 3.1
8.8
EPSS
3.1%
CVE-2020-6468 May 21, 04:15 HIGH This Week

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Chrome Google Memory Corruption Debian +6
NVD
CVSS 3.1
8.8
EPSS
6.4%
CVE-2020-6467 May 21, 04:15 HIGH This Week

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Chrome Google Use After Free Memory Corruption +7
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2020-6463 May 21, 04:15 HIGH This Week

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Chrome Google Use After Free Memory Corruption +9
NVD
CVSS 3.1
8.8
EPSS
2.9%
CVE-2020-6458 May 21, 04:15 HIGH This Week

Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Chrome Google Debian +1
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2020-12647 May 21, 03:15 HIGH This Week

Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Algol Compiler Unisys
NVD
CVSS 3.1
8.8
EPSS
0.4%
CVE-2020-1136 May 21, 23:15 HIGH PATCH This Week

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Windows Server 2012 Windows Server 2016 +4
NVD VulDB
CVSS 3.1
7.8
EPSS
4.7%
CVE-2020-1028 May 21, 23:15 HIGH PATCH This Week

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Windows Server 2016 Windows Server 2019 +1
NVD VulDB
CVSS 3.1
7.8
EPSS
4.7%
CVE-2020-1161 May 21, 23:15 HIGH PATCH This Week

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Visual Studio 2017 Visual Studio 2019 Asp Net Core
NVD VulDB
CVSS 3.1
7.5
EPSS
5.7%
CVE-2020-1150 May 21, 23:15 HIGH PATCH This Week

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Windows Server 2008 Windows 7
NVD VulDB
CVSS 3.1
7.8
EPSS
3.9%
CVE-2020-1158 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
3.0%
CVE-2020-1157 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
3.0%
CVE-2020-1156 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
3.0%
CVE-2020-1155 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
3.0%
CVE-2020-1139 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
3.0%
CVE-2020-0909 May 21, 23:15 HIGH PATCH This Week

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +4
NVD VulDB
CVSS 3.1
7.5
EPSS
4.4%
CVE-2020-6489 May 21, 04:15 MEDIUM POC This Month

Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Chrome Google Debian Debian Linux +5
NVD
CVSS 3.1
4.3
EPSS
1.6%
CVE-2020-6488 May 21, 04:15 MEDIUM POC This Month

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Chrome Google Debian Debian Linux +5
NVD
CVSS 3.1
4.3
EPSS
1.5%
CVE-2020-1066 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Net Framework
NVD VulDB
CVSS 3.1
7.8
EPSS
2.3%
CVE-2020-13113 May 21, 17:15 HIGH PATCH This Week

An issue was discovered in libexif before 0.6.22. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Denial Of Service Debian Canonical Debian Linux Leap +4
NVD GitHub
CVSS 3.1
8.2
EPSS
1.9%
CVE-2020-12693 May 21, 23:15 HIGH This Week

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Debian Debian Linux Fedora Leap +4
NVD
CVSS 3.1
8.1
EPSS
2.3%
CVE-2020-1191 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
1.4%
CVE-2020-1070 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-1082 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Microsoft Windows Server 2016 Windows Server 2019 Windows 10 +1
NVD VulDB
CVSS 3.1
7.8
EPSS
0.9%
CVE-2020-1021 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +1
NVD VulDB
CVSS 3.1
7.8
EPSS
0.9%
CVE-2020-1079 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +3
NVD VulDB
CVSS 3.1
7.8
EPSS
0.9%
CVE-2020-1109 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.9%
CVE-2020-1135 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1010 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1166 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1165 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1154 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1142 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1140 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1137 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1114 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1111 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1110 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1081 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1068 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1088 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.8%
CVE-2020-1078 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +5
NVD VulDB
CVSS 3.1
7.8
EPSS
0.7%
CVE-2020-1190 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.7%
CVE-2020-1189 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.7%
CVE-2020-1188 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.7%
CVE-2020-1187 May 21, 23:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.7%
Prev Page 2 of 4 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy