Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-0804
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0803, CVE-2020-0845.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0804'}]
CVE State: PUBLISHED
Explain CVE-2020-0805
A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections, aka 'Projected Filesystem Security Feature Bypass Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0805'}]
CVE State: PUBLISHED
Explain CVE-2020-0806
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0772.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0806'}]
CVE State: PUBLISHED
Explain CVE-2020-0807
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0809, CVE-2020-0869.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0807'}]
CVE State: PUBLISHED
Explain CVE-2020-0808
An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0808'}]
CVE State: PUBLISHED
Explain CVE-2020-0809
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0869.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0809'}]
CVE State: PUBLISHED
Explain CVE-2020-0810
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system.An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.The update addresses the vulnerability by not permitting Diagnostics Hub Standard Collector or the Visual Studio Standard Collector to create files in arbitrary locations., aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0810'}]
CVE State: PUBLISHED
Explain CVE-2020-0811
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0811'}]
CVE State: PUBLISHED
Explain CVE-2020-0812
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0812'}]
CVE State: PUBLISHED
Explain CVE-2020-0813
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the userâ€™s computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory., aka 'Scripting Engine Information Disclosure Vulnerability'.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0813'}]
CVE State: PUBLISHED
Explain CVE-2020-0814
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0842, CVE-2020-0843.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0814'}]
CVE State: PUBLISHED
Explain CVE-2020-0815
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0758.
Affected Products: Azure DevOps Server 2019 Update 1.1
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0815'}]
CVE State: PUBLISHED
Explain CVE-2020-0816
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.
Affected Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0816'}]
CVE State: PUBLISHED
Explain CVE-2020-0819
An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device Setup Manager Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0819'}]
CVE State: PUBLISHED
Explain CVE-2020-0820
An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0820'}]
CVE State: PUBLISHED
Explain CVE-2020-0821
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1007.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0821'}]
CVE State: PUBLISHED
Explain CVE-2020-0822
An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0822'}]
CVE State: PUBLISHED
Explain CVE-2020-0823
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0823'}]
CVE State: PUBLISHED
Explain CVE-2020-0824
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
Affected Products: Internet Explorer 11
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0824'}]
CVE State: PUBLISHED
Explain CVE-2020-0825
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0825'}]
CVE State: PUBLISHED
Explain CVE-2020-0826
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0826'}]
CVE State: PUBLISHED
Explain CVE-2020-0827
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0827'}]
CVE State: PUBLISHED
Explain CVE-2020-0828
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0828'}]
CVE State: PUBLISHED
Explain CVE-2020-0829
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0829'}]
CVE State: PUBLISHED
Explain CVE-2020-0830
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0830'}]
CVE State: PUBLISHED
Explain CVE-2020-0831
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0831'}]
CVE State: PUBLISHED
Explain CVE-2020-0832
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0833, CVE-2020-0848.
Affected Products: Internet Explorer 9
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0832'}]
CVE State: PUBLISHED
Explain CVE-2020-0833
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0848.
Affected Products: Internet Explorer 11
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0833'}]
CVE State: PUBLISHED
Explain CVE-2020-0834
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system, aka 'Windows ALPC Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0834'}]
CVE State: PUBLISHED
Explain CVE-2020-0835
An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'.
Affected Products: Windows Defender antimalware platform
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0835'}]
CVE State: PUBLISHED
Explain CVE-2020-0836
A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1228.
Affected Products: Windows Server, version 2004 (Server Core installation)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0836'}]
CVE State: PUBLISHED
Explain CVE-2020-0837
A spoofing vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'ADFS Spoofing Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837'}]
CVE State: PUBLISHED
Explain CVE-2020-0838
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka 'NTFS Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0838'}]
CVE State: PUBLISHED
Explain CVE-2020-0839
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrslvr.dll Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0839'}]
CVE State: PUBLISHED
Explain CVE-2020-0840
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841, CVE-2020-0849, CVE-2020-0896.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0840'}]
CVE State: PUBLISHED
Explain CVE-2020-0841
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0849, CVE-2020-0896.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0841'}]
CVE State: PUBLISHED
Explain CVE-2020-0842
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0814, CVE-2020-0843.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0842'}]
CVE State: PUBLISHED
Explain CVE-2020-0843
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0814, CVE-2020-0842.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0843'}]
CVE State: PUBLISHED
Explain CVE-2020-0844
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0844'}]
CVE State: PUBLISHED
Explain CVE-2020-0845
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0803, CVE-2020-0804.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0845'}]
CVE State: PUBLISHED
Explain CVE-2020-0847
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
Affected Products: Internet Explorer 9
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0847'}]
CVE State: PUBLISHED
Explain CVE-2020-0848
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0848'}]
CVE State: PUBLISHED
Explain CVE-2020-0849
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0849'}]
CVE State: PUBLISHED
Explain CVE-2020-0850
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850'}]
CVE State: PUBLISHED
Explain CVE-2020-0851
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0851'}]
CVE State: PUBLISHED
Explain CVE-2020-0852
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
Affected Products: Microsoft SharePoint Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0852'}]
CVE State: PUBLISHED
Explain CVE-2020-0853
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0853'}]
CVE State: PUBLISHED
Explain CVE-2020-0854
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0854'}]
CVE State: PUBLISHED
Explain CVE-2020-0855
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855'}]
CVE State: PUBLISHED
Explain CVE-2020-0856
An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory, aka 'Active Directory Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0664.
Affected Products: Windows Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0856'}]
CVE State: PUBLISHED
Explain CVE-2020-0857
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0857'}]
CVE State: PUBLISHED
Explain CVE-2020-0858
An elevation of privilege vulnerability exists when the &quot;Public Account Pictures&quot; folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0776.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0858'}]
CVE State: PUBLISHED
Explain CVE-2020-0859
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0859'}]
CVE State: PUBLISHED
Explain CVE-2020-0860
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0770, CVE-2020-0773.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0860'}]
CVE State: PUBLISHED
Explain CVE-2020-0861
An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0861'}]
CVE State: PUBLISHED
Explain CVE-2020-0863
An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 1909 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0863'}]
CVE State: PUBLISHED
Explain CVE-2020-0864
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0865, CVE-2020-0866, CVE-2020-0897.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0864'}]
CVE State: PUBLISHED
Explain CVE-2020-0865
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0866, CVE-2020-0897.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0865'}]
CVE State: PUBLISHED
Explain CVE-2020-0866
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0897.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0866'}]
CVE State: PUBLISHED
Explain CVE-2020-0867
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0867'}]
CVE State: PUBLISHED
Explain CVE-2020-0868
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0868'}]
CVE State: PUBLISHED
Explain CVE-2020-0869
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807, CVE-2020-0809.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0869'}]
CVE State: PUBLISHED
Explain CVE-2020-0870
An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory, aka 'Shell infrastructure component Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0870'}]
CVE State: PUBLISHED
Explain CVE-2020-0871
An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0871'}]
CVE State: PUBLISHED
Explain CVE-2020-0872
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'.
Affected Products: Application Inspector
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0872'}]
CVE State: PUBLISHED
Explain CVE-2020-0874
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0879, CVE-2020-0880, CVE-2020-0882.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0874'}]
CVE State: PUBLISHED
Explain CVE-2020-0875
An information disclosure vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0875'}]
CVE State: PUBLISHED
Explain CVE-2020-0876
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 1909 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0876'}]
CVE State: PUBLISHED
Explain CVE-2020-0877
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0887.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0877'}]
CVE State: PUBLISHED
Explain CVE-2020-0878
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0878'}]
CVE State: PUBLISHED
Explain CVE-2020-0879
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0880, CVE-2020-0882.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0879'}]
CVE State: PUBLISHED
Explain CVE-2020-0880
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0882.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0880'}]
CVE State: PUBLISHED
Explain CVE-2020-0881
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0883.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0881'}]
CVE State: PUBLISHED
Explain CVE-2020-0882
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0774, CVE-2020-0874, CVE-2020-0879, CVE-2020-0880.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0882'}]
CVE State: PUBLISHED
Explain CVE-2020-0883
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0883'}]
CVE State: PUBLISHED
Explain CVE-2020-0884
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
Affected Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884'}]
CVE State: PUBLISHED
Explain CVE-2020-0885
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0885'}]
CVE State: PUBLISHED
Explain CVE-2020-0886
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1559.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0886'}]
CVE State: PUBLISHED
Explain CVE-2020-0887
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0877.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0887'}]
CVE State: PUBLISHED
Explain CVE-2020-0888
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0784.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0888'}]
CVE State: PUBLISHED
Explain CVE-2020-0889
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0889'}]
CVE State: PUBLISHED
Explain CVE-2020-0890
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0904.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0890'}]
CVE State: PUBLISHED
Explain CVE-2020-0891
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891'}]
CVE State: PUBLISHED
Explain CVE-2020-0892
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.
Affected Products: Microsoft SharePoint Foundation
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892'}]
CVE State: PUBLISHED
Explain CVE-2020-0893
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0893'}]
CVE State: PUBLISHED
Explain CVE-2020-0894
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0894'}]
CVE State: PUBLISHED
Explain CVE-2020-0895
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.
Affected Products: Internet Explorer 9
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0895'}]
CVE State: PUBLISHED
Explain CVE-2020-0896
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0849.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0896'}]
CVE State: PUBLISHED
Explain CVE-2020-0897
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0777, CVE-2020-0797, CVE-2020-0800, CVE-2020-0864, CVE-2020-0865, CVE-2020-0866.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0897'}]
CVE State: PUBLISHED
Explain CVE-2020-0898
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0898'}]
CVE State: PUBLISHED
Explain CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.
Affected Products: Microsoft Visual Studio 2019 version 16.5
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0899'}]
CVE State: PUBLISHED
Explain CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.
Affected Products: Microsoft Visual Studio 2019 version 16.5
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0900'}]
CVE State: PUBLISHED
Explain CVE-2020-0901
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
Affected Products: Microsoft 365 Apps for Enterprise for 64-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0901'}]
CVE State: PUBLISHED
Explain CVE-2020-0902
An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation of Privilege'.
Affected Products: Service Fabric
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0902'}]
CVE State: PUBLISHED
Explain CVE-2020-0903
A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
Affected Products: Microsoft Exchange Server 2019 Cumulative Update 4
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0903'}]
CVE State: PUBLISHED
Explain CVE-2020-0904
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0890.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0904'}]
CVE State: PUBLISHED
Explain CVE-2020-0905
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Affected Products: Microsoft Dynamics NAV 2018
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0905'}]
CVE State: PUBLISHED
Explain CVE-2020-0906
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0906'}]
CVE State: PUBLISHED
Explain CVE-2020-0907
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0907'}]
CVE State: PUBLISHED
Explain CVE-2020-0908
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory, aka 'Windows Text Service Module Remote Code Execution Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0908'}]
CVE State: PUBLISHED
Explain CVE-2020-0909
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets., aka 'Windows Hyper-V Denial of Service Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0909'}]
CVE State: PUBLISHED