Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-1425 State: PUBLISHED Published: 2020-07-27T18:50:12 Last Updated: 2024-08-04T06:39:10.299Z Vendors: Microsoft Products: Windows 10 Version 2004 for x64-based Systems, Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 1803 for 32-bit Systems, Windows 10 Version 1803 for x64-based Systems, Windows 10 Version 1803 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Wi
9 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709 for x64-based Systems, Windows 10 Version 1709 for ARM64-based Systems, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems Problem Types: Remote Code Execution Description: A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457. Additional An
oft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1425
CVE ID: CVE-2020-1426 State: PUBLISHED Published: 2020-07-14T22:54:38 Last Updated: 2024-08-04T06:39:10.245Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1367, CVE-2020-1389, CVE-2020-1419. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1426
CVE ID: CVE-2020-1427 State: PUBLISHED Published: 2020-07-14T22:54:38 Last Updated: 2024-08-04T06:39:10.260Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1428, CVE-2020-1438. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1427
CVE ID: CVE-2020-1428 State: PUBLISHED Published: 2020-07-14T22:54:39 Last Updated: 2024-08-04T06:39:09.704Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1438. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1428
CVE ID: CVE-2020-1429 State: PUBLISHED Published: 2020-07-14T22:54:39 Last Updated: 2024-08-04T06:39:10.326Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1429
CVE ID: CVE-2020-1430 State: PUBLISHED Published: 2020-07-14T22:54:40 Last Updated: 2024-08-04T06:39:10.552Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1354. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1430
CVE ID: CVE-2020-1431 State: PUBLISHED Published: 2020-07-14T22:54:40 Last Updated: 2024-08-04T06:39:09.685Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege V
ing how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1431
CVE ID: CVE-2020-1432 State: PUBLISHED Published: 2020-07-14T22:54:41 Last Updated: 2024-08-04T06:39:09.659Z Vendors: Microsoft Products: Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 2004 for ARM64-based Systems, Internet Explorer 11, Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903
ms, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 11 on Windows Server 2012 Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1432
CVE ID: CVE-2020-1433 State: PUBLISHED Published: 2020-07-14T22:54:41 Last Updated: 2024-08-04T06:39:09.642Z Vendors: Microsoft Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 2004 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Sy
indows 10 Version 1803 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2019, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems, Microsoft Edge (EdgeHTML-ba
ased Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 fo
Edge (EdgeHTML-based) on Windows 10 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2016 Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1433
CVE ID: CVE-2020-1434 State: PUBLISHED Published: 2020-07-14T22:54:42 Last Updated: 2024-08-04T06:39:09.643Z Vendors: Microsoft Products: Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows 10 Version 2004 for 32-bit Systems, Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1434
CVE ID: CVE-2020-1435 State: PUBLISHED Published: 2020-07-14T22:54:42 Last Updated: 2024-08-04T06:39:10.325Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1435
CVE ID: CVE-2020-1436 State: PUBLISHED Published: 2020-07-14T22:54:43 Last Updated: 2024-08-04T06:39:10.483Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Windows Font Library Remote Code Execution Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1436 - https://www.zerodayinitiat
erences: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1436 - https://www.zerodayinitiative.com/advisories/ZDI-20-877/ - http://www.openwall.com/lists/oss-security/2020/08/25/3 - http://www.openwall.com/lists/oss-security/2020/08/25/5
CVE ID: CVE-2020-1437 State: PUBLISHED Published: 2020-07-14T22:54:43 Last Updated: 2024-08-04T06:39:09.603Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1437
CVE ID: CVE-2020-1438 State: PUBLISHED Published: 2020-07-14T22:54:44 Last Updated: 2024-08-04T06:39:09.652Z Vendors: Microsoft Products: Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems, Windows Server, version 2004 (Server Core installation), Windows, Windows Server, Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for x64-based Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Win
for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373, CVE-2020-1390, CVE-2020-1427, CVE-2020-1428. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1438
CVE ID: CVE-2020-1439 State: PUBLISHED Published: 2020-07-14T22:54:44 Last Updated: 2024-08-04T06:39:10.465Z Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, Microsoft SharePoint Foundation Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439 - https://www.zerodayinitiativ
ences: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1439 - https://www.zerodayinitiative.com/advisories/ZDI-20-874/
CVE ID: CVE-2020-1440 State: PUBLISHED Published: 2020-09-11T17:09:16 Last Updated: 2024-08-04T06:39:09.629Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019, Microsoft SharePoint Server 2010 Service Pack 2 Problem Types: Tampering Description: <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an
sfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1440
CVE ID: CVE-2020-1442 State: PUBLISHED Published: 2020-07-14T22:54:44 Last Updated: 2024-08-04T06:39:09.664Z Vendors: Microsoft Products: Microsoft Office Online Server, Microsoft Office Web Apps Problem Types: Spoofing Description: A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1442
CVE ID: CVE-2020-1443 State: PUBLISHED Published: 2020-07-14T22:54:45 Last Updated: 2024-08-04T06:39:10.331Z Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, Microsoft SharePoint Foundation Problem Types: Spoofing Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1443