deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0607
Published: 2020-01-14
Description: An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0607; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0607
CVE: CVE-2020-0608
Published: 2020-01-14
Description: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0608; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0608
CVE: CVE-2020-0609
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.
CVSS Score: 9.8 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0609; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0609
CVE: CVE-2020-0610
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.
CVSS Score: 9.8 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610
CVE: CVE-2020-0611
Published: 2020-01-14
Description: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0611; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0611
CVE: CVE-2020-0612
Published: 2020-01-14
Description: A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0612; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0612
CVE: CVE-2020-0613
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0613; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0613
CVE: CVE-2020-0614
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0614; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0614
CVE: CVE-2020-0615
Published: 2020-01-14
Description: An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0615; https://www.zerodayinitiative.com/advisories/ZDI-20-123/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0615
CVE: CVE-2020-0616
Published: 2020-01-14
Description: A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0616; https://www.zerodayinitiative.com/advisories/ZDI-20-124/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0616
CVE: CVE-2020-0617
Published: 2020-01-14
Description: A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Hyper-V Denial of Service Vulnerability'.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0617; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0617
CVE: CVE-2020-0620
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0620; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0620
CVE: CVE-2020-0621
Published: 2020-01-14
Description: A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update, aka 'Windows Security Feature Bypass Vulnerability'.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-613
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0621; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0621
CVE: CVE-2020-0622
Published: 2020-01-14
Description: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0622; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0622
CVE: CVE-2020-0623
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0623; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0623
CVE: CVE-2020-0624
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0624; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0624
CVE: CVE-2020-0625
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0625; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0625
CVE: CVE-2020-0626
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0626; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0626
CVE: CVE-2020-0627
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0627; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0627
CVE: CVE-2020-0628
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0628; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0628
CVE: CVE-2020-0629
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0629; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0629
CVE: CVE-2020-0630
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0630; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0630
CVE: CVE-2020-0631
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0632, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0631; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0631
CVE: CVE-2020-0632
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0633.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0632; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0632
CVE: CVE-2020-0633
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0633; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0633
CVE: CVE-2020-0634
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634; https://www.zerodayinitiative.com/advisories/ZDI-20-125/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634
CVE: CVE-2020-0635
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0644.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0635; https://www.zerodayinitiative.com/advisories/ZDI-20-143/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0635
CVE: CVE-2020-0636
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0636; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0636
CVE: CVE-2020-0637
Published: 2020-01-14
Description: An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information, aka 'Remote Desktop Web Access Information Disclosure Vulnerability'.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0637; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0637
CVE: CVE-2020-0638
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0638
CVE: CVE-2020-0639
Published: 2020-01-14
Description: An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0639; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0639
CVE: CVE-2020-0640
Published: 2020-01-14
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0640; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0640
CVE: CVE-2020-0641
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0641; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0641
CVE: CVE-2020-0642
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/158729/Microsoft-Windows-Win32k-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0642; http://packetstormsecurity.com/files/158729/Microsoft-Windows-Win32k-Privilege-Escalation.html
CVE: CVE-2020-0643
Published: 2020-01-14
Description: An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI+ Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0643; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0643
CVE: CVE-2020-0644
Published: 2020-01-14
Description: An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635.
CVSS Score: 7.8 (HIGH)
CWE: CWE-330
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0644; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0644
CVE: CVE-2020-0646
Published: 2020-01-14
Description: A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91, CWE-91
References: http://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0646; http://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html
CVE: CVE-2020-0647
Published: 2020-01-14
Description: A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-346
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0647; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0647
CVE: CVE-2020-0650
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0650
CVE: CVE-2020-0651
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0653.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0651; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0651
CVE: CVE-2020-0652
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0652; https://www.zerodayinitiative.com/advisories/ZDI-20-127/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0652
CVE: CVE-2020-0653
Published: 2020-01-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0651.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0653; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0653
CVE: CVE-2020-0654
Published: 2020-01-14
Description: A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing links., aka 'Microsoft OneDrive for Android Security Feature Bypass Vulnerability'.
CVSS Score: 9.1 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0654; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0654
CVE: CVE-2020-0656
Published: 2020-01-14
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0656; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0656
CVE: CVE-2019-17149
Published: 2020-01-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was accidentally assigned. Notes: All CVE users should ignore this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-17150
Published: 2020-01-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was accidentally assigned. Notes: All CVE users should ignore this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage