Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-1500
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1499, CVE-2020-1501.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1500'}]
CVE State: PUBLISHED
Explain CVE-2020-1501
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1499, CVE-2020-1500.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1501'}]
CVE State: PUBLISHED
Explain CVE-2020-1502
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory, aka 'Microsoft Word Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1503, CVE-2020-1583.
Affected Products: Microsoft SharePoint Server 2019
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1502'}]
CVE State: PUBLISHED
Explain CVE-2020-1503
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory, aka 'Microsoft Word Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1502, CVE-2020-1583.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1503'}]
CVE State: PUBLISHED
Explain CVE-2020-1504
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1494, CVE-2020-1495, CVE-2020-1496, CVE-2020-1498.
Affected Products: Microsoft Excel 2010 Service Pack 2 (32-bit editions)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1504'}]
CVE State: PUBLISHED
Explain CVE-2020-1505
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory, aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1505'}]
CVE State: PUBLISHED
Explain CVE-2020-1506
An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory, aka 'Windows Start-Up Application Elevation of Privilege Vulnerability'.
Affected Products: Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1506'}]
CVE State: PUBLISHED
Explain CVE-2020-1507
An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory, aka 'Microsoft COM for Windows Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1507'}]
CVE State: PUBLISHED
Explain CVE-2020-1508
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects, aka 'Windows Media Audio Decoder Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1593.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1508'}]
CVE State: PUBLISHED
Explain CVE-2020-1509
An elevation of privilege vulnerability exists in the Local Security Authority Subsystem Service (LSASS) when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1509'}]
CVE State: PUBLISHED
Explain CVE-2020-1510
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1510'}]
CVE State: PUBLISHED
Explain CVE-2020-1511
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1511'}]
CVE State: PUBLISHED
Explain CVE-2020-1512
An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1512'}]
CVE State: PUBLISHED
Explain CVE-2020-1513
An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1489.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1513'}]
CVE State: PUBLISHED
Explain CVE-2020-1514
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1198, CVE-2020-1227, CVE-2020-1345, CVE-2020-1482, CVE-2020-1575.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1514'}]
CVE State: PUBLISHED
Explain CVE-2020-1515
An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Telephony Server Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1515'}]
CVE State: PUBLISHED
Explain CVE-2020-1516
An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Work Folders Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1470, CVE-2020-1484.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1516'}]
CVE State: PUBLISHED
Explain CVE-2020-1517
An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows File Server Resource Management Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1518.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1517'}]
CVE State: PUBLISHED
Explain CVE-2020-1518
An elevation of privilege vulnerability exists when the Windows File Server Resource Management Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows File Server Resource Management Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1517.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1518'}]
CVE State: PUBLISHED
Explain CVE-2020-1519
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1538.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1519'}]
CVE State: PUBLISHED
Explain CVE-2020-1520
A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Windows Font Driver Host handles memory., aka 'Windows Font Driver Host Remote Code Execution Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1520'}]
CVE State: PUBLISHED
Explain CVE-2020-1521
An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Speech Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1522.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1521'}]
CVE State: PUBLISHED
Explain CVE-2020-1522
An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Speech Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1521.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1522'}]
CVE State: PUBLISHED
Explain CVE-2020-1523
A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1440.
Affected Products: Microsoft SharePoint Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1523'}]
CVE State: PUBLISHED
Explain CVE-2020-1524
An elevation of privilege vulnerability exists when the Windows Speech Shell Components improperly handle memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Speech Shell Components Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1524'}]
CVE State: PUBLISHED
Explain CVE-2020-1525
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379, CVE-2020-1477, CVE-2020-1478, CVE-2020-1492, CVE-2020-1554.
Affected Products: Windows 10 Version 2004 for ARM64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1525'}]
CVE State: PUBLISHED
Explain CVE-2020-1526
An elevation of privilege vulnerability exists when the Windows Network Connection Broker improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Connection Broker Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1526'}]
CVE State: PUBLISHED
Explain CVE-2020-1527
An elevation of privilege vulnerability exists when the Windows Custom Protocol Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Custom Protocol Engine Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1527'}]
CVE State: PUBLISHED
Explain CVE-2020-1528
An elevation of privilege vulnerability exists when the Windows Radio Manager API improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Radio Manager API Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1528'}]
CVE State: PUBLISHED
Explain CVE-2020-1529
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1480.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1529'}]
CVE State: PUBLISHED
Explain CVE-2020-1530
An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Remote Access Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1537.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1530'}]
CVE State: PUBLISHED
Explain CVE-2020-1531
An elevation of privilege vulnerability exists when the Windows Accounts Control improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Accounts Control Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1531'}]
CVE State: PUBLISHED
Explain CVE-2020-1532
An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows InstallService Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 1909 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1532'}]
CVE State: PUBLISHED
Explain CVE-2020-1533
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1556.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1533'}]
CVE State: PUBLISHED
Explain CVE-2020-1534
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1534'}]
CVE State: PUBLISHED
Explain CVE-2020-1535
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1535'}]
CVE State: PUBLISHED
Explain CVE-2020-1536
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1536'}]
CVE State: PUBLISHED
Explain CVE-2020-1537
An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations, aka 'Windows Remote Access Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1530.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1537'}]
CVE State: PUBLISHED
Explain CVE-2020-1538
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1519.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1538'}]
CVE State: PUBLISHED
Explain CVE-2020-1539
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1539'}]
CVE State: PUBLISHED
Explain CVE-2020-1540
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1540'}]
CVE State: PUBLISHED
Explain CVE-2020-1541
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1541'}]
CVE State: PUBLISHED
Explain CVE-2020-1542
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1542'}]
CVE State: PUBLISHED
Explain CVE-2020-1543
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1543'}]
CVE State: PUBLISHED
Explain CVE-2020-1544
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1544'}]
CVE State: PUBLISHED
Explain CVE-2020-1545
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1546, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1545'}]
CVE State: PUBLISHED
Explain CVE-2020-1546
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1547, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1546'}]
CVE State: PUBLISHED
Explain CVE-2020-1547
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1551.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1547'}]
CVE State: PUBLISHED
Explain CVE-2020-1548
An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows WaasMedic Service Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1548'}]
CVE State: PUBLISHED
Explain CVE-2020-1549
An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CDP User Components Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1550.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1549'}]
CVE State: PUBLISHED
Explain CVE-2020-1550
An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CDP User Components Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1549.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1550'}]
CVE State: PUBLISHED
Explain CVE-2020-1551
An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535, CVE-2020-1536, CVE-2020-1539, CVE-2020-1540, CVE-2020-1541, CVE-2020-1542, CVE-2020-1543, CVE-2020-1544, CVE-2020-1545, CVE-2020-1546, CVE-2020-1547.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1551'}]
CVE State: PUBLISHED
Explain CVE-2020-1552
An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1552'}]
CVE State: PUBLISHED
Explain CVE-2020-1553
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1553'}]
CVE State: PUBLISHED
Explain CVE-2020-1554
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1379, CVE-2020-1477, CVE-2020-1478, CVE-2020-1492, CVE-2020-1525.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1554'}]
CVE State: PUBLISHED
Explain CVE-2020-1555
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1380, CVE-2020-1570.
Affected Products: ChakraCore
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1555'}]
CVE State: PUBLISHED
Explain CVE-2020-1556
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1533.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1556'}]
CVE State: PUBLISHED
Explain CVE-2020-1557
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473, CVE-2020-1558, CVE-2020-1564.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1557'}]
CVE State: PUBLISHED
Explain CVE-2020-1558
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473, CVE-2020-1557, CVE-2020-1564.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1558'}]
CVE State: PUBLISHED
Explain CVE-2020-1559
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0886.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1559'}]
CVE State: PUBLISHED
Explain CVE-2020-1560
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1574, CVE-2020-1585.
Affected Products: Windows 10 Version 2004 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1560'}]
CVE State: PUBLISHED
Explain CVE-2020-1561
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1562.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1561'}]
CVE State: PUBLISHED
Explain CVE-2020-1562
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1561.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1562'}]
CVE State: PUBLISHED
Explain CVE-2020-1563
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
Affected Products: Microsoft Office 2019 for 32-bit editions
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1563'}]
CVE State: PUBLISHED
Explain CVE-2020-1564
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1473, CVE-2020-1557, CVE-2020-1558.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1564'}]
CVE State: PUBLISHED
Explain CVE-2020-1565
An elevation of privilege vulnerability exists when the &quot;Public Account Pictures&quot; folder improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1565'}]
CVE State: PUBLISHED
Explain CVE-2020-1566
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1417, CVE-2020-1486.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1566'}]
CVE State: PUBLISHED
Explain CVE-2020-1567
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.
Affected Products: Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1567'}]
CVE State: PUBLISHED
Explain CVE-2020-1568
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.
Affected Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1568'}]
CVE State: PUBLISHED
Explain CVE-2020-1569
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.
Affected Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1569'}]
CVE State: PUBLISHED
Explain CVE-2020-1570
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1380, CVE-2020-1555.
Affected Products: Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1570'}]
CVE State: PUBLISHED
Explain CVE-2020-1571
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Setup Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1571'}]
CVE State: PUBLISHED
Explain CVE-2020-1573
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1580.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1573'}]
CVE State: PUBLISHED
Explain CVE-2020-1574
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1560, CVE-2020-1585.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1574'}]
CVE State: PUBLISHED
Explain CVE-2020-1575
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1198, CVE-2020-1227, CVE-2020-1345, CVE-2020-1482, CVE-2020-1514.
Affected Products: Microsoft SharePoint Foundation
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1575'}]
CVE State: PUBLISHED
Explain CVE-2020-1576
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1200, CVE-2020-1210, CVE-2020-1452, CVE-2020-1453, CVE-2020-1595.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1576'}]
CVE State: PUBLISHED
Explain CVE-2020-1577
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1577'}]
CVE State: PUBLISHED
Explain CVE-2020-1578
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass, aka 'Windows Kernel Information Disclosure Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1578'}]
CVE State: PUBLISHED
Explain CVE-2020-1579
An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1579'}]
CVE State: PUBLISHED
Explain CVE-2020-1580
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1573.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1580'}]
CVE State: PUBLISHED
Explain CVE-2020-1581
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory, aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'.
Affected Products: Microsoft Office 2013 Click-to-Run (C2R) for 32-bit editions
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581'}]
CVE State: PUBLISHED
Explain CVE-2020-1582
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Remote Code Execution Vulnerability'.
Affected Products: Microsoft Access 2013 Service Pack 1 (32-bit editions)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1582'}]
CVE State: PUBLISHED
Explain CVE-2020-1583
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory, aka 'Microsoft Word Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1502, CVE-2020-1503.
Affected Products: Microsoft SharePoint Enterprise Server 2016
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1583'}]
CVE State: PUBLISHED
Explain CVE-2020-1584
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrslvr.dll Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1584'}]
CVE State: PUBLISHED
Explain CVE-2020-1585
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1560, CVE-2020-1574.
Affected Products: Windows 10 Version 2004 for ARM64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1585'}]
CVE State: PUBLISHED
Explain CVE-2020-1587
An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability'.
Affected Products: Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1587'}]
CVE State: PUBLISHED
Explain CVE-2020-1589
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0928, CVE-2020-1033, CVE-2020-1592, CVE-2020-16854.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1589'}]
CVE State: PUBLISHED
Explain CVE-2020-1590
An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1590'}]
CVE State: PUBLISHED
Explain CVE-2020-1591
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.
Affected Products: Microsoft Dynamics 365 (on-premises) version 9.0
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1591'}]
CVE State: PUBLISHED
Explain CVE-2020-1592
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0928, CVE-2020-1033, CVE-2020-1589, CVE-2020-16854.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1592'}]
CVE State: PUBLISHED
Explain CVE-2020-1593
A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects, aka 'Windows Media Audio Decoder Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1508.
Affected Products: Windows 10 Version 2004 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1593'}]
CVE State: PUBLISHED
Explain CVE-2020-1594
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1193, CVE-2020-1332, CVE-2020-1335.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1594'}]
CVE State: PUBLISHED
Explain CVE-2020-1595
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1200, CVE-2020-1210, CVE-2020-1452, CVE-2020-1453, CVE-2020-1576.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1595'}]
CVE State: PUBLISHED