2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-16955HIGH7.8<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles cer...
CVE-2020-16954HIGH7.8<p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ...
CVE-2020-16953MEDIUM6.5<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m...
CVE-2020-16952HIGH8.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark...
CVE-2020-16951HIGH8.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark...
CVE-2020-16950MEDIUM5<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m...
CVE-2020-16949MEDIUM4.7<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle obj...
CVE-2020-16948MEDIUM6.5<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in m...
CVE-2020-16947HIGH7.5<p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle...
CVE-2020-16946HIGH8.7<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-16945HIGH8.7<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-16944HIGH8.7<p>This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affe...
CVE-2020-16943MEDIUM6.5<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who su...
CVE-2020-16942MEDIUM4.1<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder struc...
CVE-2020-16941MEDIUM4.1<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder struc...
CVE-2020-16940HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles jun...
CVE-2020-16939HIGH7.8<p>An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successful...
CVE-2020-16938MEDIUM5.5<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attac...
CVE-2020-16937MEDIUM4.7<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attac...
CVE-2020-16936HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p...
CVE-2020-16935HIGH7.8<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who s...
CVE-2020-16934HIGH7<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles cer...
CVE-2020-16933HIGH7<p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files...
CVE-2020-16932HIGH7.8<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle o...
CVE-2020-16931HIGH7.8<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle o...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now