deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-17030
Published: 2020-11-11
Description: Windows MSCTF Server Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17030; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17030
CVE: CVE-2020-17031
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17031; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17031
CVE: CVE-2020-17032
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17032; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17032
CVE: CVE-2020-17033
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17033; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17033
CVE: CVE-2020-17034
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17034; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17034
CVE: CVE-2020-17035
Published: 2020-11-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17035; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17035
CVE: CVE-2020-17036
Published: 2020-11-11
Description: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17036; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17036
CVE: CVE-2020-17037
Published: 2020-11-11
Description: Windows WalletService Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17037; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17037
CVE: CVE-2020-17038
Published: 2020-11-11
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17038; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17038
CVE: CVE-2020-17040
Published: 2020-11-11
Description: Windows Hyper-V Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17040; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17040
CVE: CVE-2020-17041
Published: 2020-11-11
Description: Windows Print Configuration Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17041; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17041
CVE: CVE-2020-17042
Published: 2020-11-11
Description: Windows Print Spooler Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17042; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17042
CVE: CVE-2020-17043
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17043; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17043
CVE: CVE-2020-17044
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17044
CVE: CVE-2020-17045
Published: 2020-11-11
Description: Windows KernelStream Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17045; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17045
CVE: CVE-2020-17046
Published: 2020-11-11
Description: Windows Error Reporting Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17046; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17046
CVE: CVE-2020-17047
Published: 2020-11-11
Description: Windows Network File System Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17047; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17047
CVE: CVE-2020-17048
Published: 2020-11-11
Description: Chakra Scripting Engine Memory Corruption Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17048; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17048
CVE: CVE-2020-17049
Published: 2020-11-11
Description: A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).
To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.
The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2021/11/10/3; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049; https://security.gentoo.org/glsa/202309-06
CVE: CVE-2020-17051
Published: 2020-11-11
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17051; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17051
CVE: CVE-2020-17052
Published: 2020-11-11
Description: Scripting Engine Memory Corruption Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17052; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17052
CVE: CVE-2020-17053
Published: 2020-11-11
Description: Internet Explorer Memory Corruption Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17053; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17053
CVE: CVE-2020-17054
Published: 2020-11-11
Description: Chakra Scripting Engine Memory Corruption Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17054; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17054
CVE: CVE-2020-17055
Published: 2020-11-11
Description: Windows Remote Access Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17055; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17055
CVE: CVE-2020-17056
Published: 2020-11-11
Description: Windows Network File System Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17056; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17056
CVE: CVE-2020-17057
Published: 2020-11-11
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17057; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17057
CVE: CVE-2020-17058
Published: 2020-11-11
Description: Microsoft Browser Memory Corruption Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17058; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17058
CVE: CVE-2020-17060
Published: 2020-11-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17060; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17060
CVE: CVE-2020-17061
Published: 2020-11-11
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17061; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17061
CVE: CVE-2020-17062
Published: 2020-11-11
Description: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17062; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17062
CVE: CVE-2020-17063
Published: 2020-11-11
Description: Microsoft Office Online Spoofing Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17063; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17063
CVE: CVE-2020-17064
Published: 2020-11-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17064; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17064
CVE: CVE-2020-17065
Published: 2020-11-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17065; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17065
CVE: CVE-2020-17066
Published: 2020-11-11
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17066; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17066
CVE: CVE-2020-17067
Published: 2020-11-11
Description: Microsoft Excel Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17067; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17067
CVE: CVE-2020-17068
Published: 2020-11-11
Description: Windows GDI+ Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17068; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17068
CVE: CVE-2020-17069
Published: 2020-11-11
Description: Windows NDIS Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17069; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17069
CVE: CVE-2020-17070
Published: 2020-11-11
Description: Windows Update Medic Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17070; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17070
CVE: CVE-2020-17071
Published: 2020-11-11
Description: Windows Delivery Optimization Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17071; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17071
CVE: CVE-2020-17073
Published: 2020-11-11
Description: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17073; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17073
CVE: CVE-2020-17074
Published: 2020-11-11
Description: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17074; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17074
CVE: CVE-2020-17075
Published: 2020-11-11
Description: Windows USO Core Worker Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17075; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17075
CVE: CVE-2020-17076
Published: 2020-11-11
Description: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17076; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17076
CVE: CVE-2020-17077
Published: 2020-11-11
Description: Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17077; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17077
CVE: CVE-2020-17078
Published: 2020-11-11
Description: Raw Image Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17078; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17078
CVE: CVE-2020-17079
Published: 2020-11-11
Description: Raw Image Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17079; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17079
CVE: CVE-2020-17081
Published: 2020-11-11
Description: Microsoft Raw Image Extension Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17081; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17081
CVE: CVE-2020-17082
Published: 2020-11-11
Description: Raw Image Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17082; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17082
CVE: CVE-2020-17083
Published: 2020-11-11
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17083; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17083
CVE: CVE-2020-17084
Published: 2020-11-11
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 8.5 (HIGH)
CWE: CWE-120
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17084; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17084
CVE: CVE-2020-17085
Published: 2020-11-11
Description: Microsoft Exchange Server Denial of Service Vulnerability
CVSS Score: 6.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17085; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17085
CVE: CVE-2020-17086
Published: 2020-11-11
Description: Raw Image Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17086; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17086
CVE: CVE-2020-17087
Published: 2020-11-11
Description: Windows Kernel Local Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-131, CWE-131
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17087
CVE: CVE-2020-17088
Published: 2020-11-11
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17088; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17088
CVE: CVE-2020-17090
Published: 2020-11-11
Description: Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17090; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17090
CVE: CVE-2020-17091
Published: 2020-11-11
Description: Microsoft Teams Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17091; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17091
CVE: CVE-2020-17100
Published: 2020-11-11
Description: Visual Studio Tampering Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17100; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17100
CVE: CVE-2020-17101
Published: 2020-11-11
Description: HEIF Image Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17101; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17101
CVE: CVE-2020-17102
Published: 2020-11-11
Description: WebP Image Extensions Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17102; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17102
CVE: CVE-2020-17104
Published: 2020-11-11
Description: Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17104; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17104
CVE: CVE-2020-17105
Published: 2020-11-11
Description: AV1 Video Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17105; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17105
CVE: CVE-2020-17106
Published: 2020-11-11
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17106; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17106
CVE: CVE-2020-17107
Published: 2020-11-11
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17107; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17107
CVE: CVE-2020-17108
Published: 2020-11-11
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17108; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17108
CVE: CVE-2020-17109
Published: 2020-11-11
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17109; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17109
CVE: CVE-2020-17110
Published: 2020-11-11
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17110; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17110
CVE: CVE-2020-17113
Published: 2020-11-11
Description: Windows Camera Codec Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/160054/Microsoft-Windows-WindowsCodecsRaw-CCanonRawImageRep-GetNamedWhiteBalances-Out-Of-Bounds-Read.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17113; http://packetstormsecurity.com/files/160054/Microsoft-Windows-WindowsCodecsRaw-CCanonRawImageRep-GetNamedWhiteBalances-Out-Of-Bounds-Read.html
CVE: CVE-2020-1325
Published: 2020-11-11
Description: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1325; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1325
CVE: CVE-2020-1599
Published: 2020-11-11
Description: Windows Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1599; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1599
CVE: CVE-2020-7328
Published: 2020-11-11
Description: External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or trigger arbitrary code execution via improper input validation of an HTTP request, where the content for the attack has been loaded into ePO by an ePO administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918, CWE-918
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10334; https://kc.mcafee.com/corporate/index?page=content&id=SB10334
CVE: CVE-2020-7329
Published: 2020-11-11
Description: Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918, CWE-918
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10334; https://kc.mcafee.com/corporate/index?page=content&id=SB10334
CVE: CVE-2020-7767
Published: 2020-11-11
Description: All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://snyk.io/vuln/SNYK-JS-EXPRESSVALIDATORS-1017404; https://snyk.io/vuln/SNYK-JS-EXPRESSVALIDATORS-1017404
CVE: CVE-2020-7768
Published: 2020-11-11
Description: The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/grpc/grpc-node/pull/1605; https://github.com/grpc/grpc-node/pull/1606; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038819