2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-1256MEDIUM5.5<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of it...
CVE-2020-1252HIGH7.8<p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulner...
CVE-2020-1250MEDIUM5.5<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An a...
CVE-2020-1245HIGH7<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects ...
CVE-2020-1228HIGH7.5<p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who suc...
CVE-2020-1227MEDIUM5.4<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1224MEDIUM5.5<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. ...
CVE-2020-1218HIGH7.8<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in m...
CVE-2020-1210CRITICAL9.9<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark...
CVE-2020-1205MEDIUM4.6<p>A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web r...
CVE-2020-1200HIGH8.6<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source mark...
CVE-2020-1198HIGH7.4<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speci...
CVE-2020-1193HIGH7.8<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle o...
CVE-2020-1180MEDIUM4.2<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor...
CVE-2020-1172MEDIUM4.2<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memor...
CVE-2020-1169HIGH7.8<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An atta...
CVE-2020-1159MEDIUM6.6<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protect...
CVE-2020-1152MEDIUM5.8<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who s...
CVE-2020-1146MEDIUM6.6<p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To ...
CVE-2020-1133MEDIUM5.5<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file op...
CVE-2020-1130MEDIUM6.6<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data op...
CVE-2020-1129HIGH8.8<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memo...
CVE-2020-1122MEDIUM5.5<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file opera...
CVE-2020-1119MEDIUM5.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attack...
CVE-2020-1115HIGH7.8<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now