2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-0713HIGH7.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ...
CVE-2020-0712HIGH7.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ...
CVE-2020-0711HIGH7.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ...
CVE-2020-0710HIGH7.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, ...
CVE-2020-0709HIGH7.8An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation...
CVE-2020-0708HIGH7.8A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this ...
CVE-2020-0707HIGH7.8An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerabil...
CVE-2020-0706MEDIUM4.3An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests,...
CVE-2020-0705MEDIUM5.5An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly...
CVE-2020-0704HIGH7.8An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To ex...
CVE-2020-0703HIGH7.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exp...
CVE-2020-0702MEDIUM6.8A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security ...
CVE-2020-0701HIGH7.8An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles obje...
CVE-2020-0698MEDIUM5.5An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memor...
CVE-2020-0697HIGH7.8An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who success...
CVE-2020-0696MEDIUM6.5A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of U...
CVE-2020-0695MEDIUM5.4A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correc...
CVE-2020-0694MEDIUM5.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall...
CVE-2020-0693MEDIUM5.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall...
CVE-2020-0692HIGH8.1An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of...
CVE-2020-0691HIGH7.8An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o...
CVE-2020-0689MEDIUM6.7A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulner...
CVE-2020-0688HIGH8.8A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o...
CVE-2020-0686HIGH7.8An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W...
CVE-2020-0685HIGH7.8An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Ser...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now