deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7456
Published: 2020-06-09
Description: In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with physical access to a USB port to be able to use a specially crafted USB device to gain kernel or user-space code execution.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://security.FreeBSD.org/advisories/FreeBSD-SA-20:17.usb.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.FreeBSD.org/advisories/FreeBSD-SA-20:17.usb.asc
CVE: CVE-2019-6173
Published: 2020-06-09
Description: A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-426, CWE-426
References: https://support.lenovo.com/us/en/product_security/len-27431; https://support.lenovo.com/us/en/product_security/len-27431
CVE: CVE-2019-6196
Published: 2020-06-09
Description: A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-426, CWE-426
References: https://support.lenovo.com/us/en/product_security/len-27431; https://support.lenovo.com/us/en/product_security/len-27431
CVE: CVE-2020-0915
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0916.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0915; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0915
CVE: CVE-2020-0916
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0916; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0916
CVE: CVE-2020-0986
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986; http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html
CVE: CVE-2020-1073
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1073; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1073
CVE: CVE-2020-1120
Published: 2020-06-09
Description: A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1244.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1120; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1120
CVE: CVE-2020-1148
Published: 2020-06-09
Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1148; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1148
CVE: CVE-2020-1160
Published: 2020-06-09
Description: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1160; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1160
CVE: CVE-2020-1162
Published: 2020-06-09
Description: An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1324.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1162; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1162
CVE: CVE-2020-1163
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1170.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1163; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1163
CVE: CVE-2020-1170
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Defender Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1163.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/160919/Cloud-Filter-Arbitrary-File-Creation-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1170; http://packetstormsecurity.com/files/160919/Cloud-Filter-Arbitrary-File-Creation-Privilege-Escalation.html
CVE: CVE-2020-1177
Published: 2020-06-09
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1177; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1177
CVE: CVE-2020-1178
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1178; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1178
CVE: CVE-2020-1181
Published: 2020-06-09
Description: A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181; https://www.zerodayinitiative.com/advisories/ZDI-20-694/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
CVE: CVE-2020-1183
Published: 2020-06-09
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318, CVE-2020-1320.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1183; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1183
CVE: CVE-2020-1194
Published: 2020-06-09
Description: A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1194; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1194
CVE: CVE-2020-1196
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print Configuration Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1196; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1196
CVE: CVE-2020-1197
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1197; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1197
CVE: CVE-2020-1199
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1199; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1199
CVE: CVE-2020-1201
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1201; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1201
CVE: CVE-2020-1202
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1202; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1202
CVE: CVE-2020-1203
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1202.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1203; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1203
CVE: CVE-2020-1204
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1204; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1204
CVE: CVE-2020-1206
Published: 2020-06-09
Description: An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: http://packetstormsecurity.com/files/158053/SMBleed-Uninitialized-Kernel-Memory-Read-Proof-Of-Concept.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1206; http://packetstormsecurity.com/files/158053/SMBleed-Uninitialized-Kernel-Memory-Read-Proof-Of-Concept.html
CVE: CVE-2020-1207
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1247, CVE-2020-1251, CVE-2020-1253, CVE-2020-1310.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1207; https://www.zerodayinitiative.com/advisories/ZDI-20-692/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1207
CVE: CVE-2020-1208
Published: 2020-06-09
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1236.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1208; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1208
CVE: CVE-2020-1209
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1209; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1209
CVE: CVE-2020-1211
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1211; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1211
CVE: CVE-2020-1212
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1212; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1212
CVE: CVE-2020-1213
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1213; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1213
CVE: CVE-2020-1214
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1214; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1214
CVE: CVE-2020-1215
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1215; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1215
CVE: CVE-2020-1216
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1230, CVE-2020-1260.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1216; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1216
CVE: CVE-2020-1217
Published: 2020-06-09
Description: An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Information Disclosure Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1217; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1217
CVE: CVE-2020-1219
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-843
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1219; https://www.zerodayinitiative.com/advisories/ZDI-20-698/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1219
CVE: CVE-2020-1220
Published: 2020-06-09
Description: A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1220; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1220
CVE: CVE-2020-1222
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1309.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1222; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1222
CVE: CVE-2020-1223
Published: 2020-06-09
Description: A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file.The update addresses the vulnerability by correcting how Microsoft Word for Android handles specially crafted URL files., aka 'Word for Android Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1223; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1223
CVE: CVE-2020-1225
Published: 2020-06-09
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1045; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225
CVE: CVE-2020-1226
Published: 2020-06-09
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1226; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1027; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1226
CVE: CVE-2020-1229
Published: 2020-06-09
Description: A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
CVSS Score: 4.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1229; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1229
CVE: CVE-2020-1230
Published: 2020-06-09
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1260.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1230; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1230
CVE: CVE-2020-1231
Published: 2020-06-09
Description: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1304, CVE-2020-1306, CVE-2020-1334.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1231; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1231
CVE: CVE-2020-1232
Published: 2020-06-09
Description: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1232; https://www.zerodayinitiative.com/advisories/ZDI-20-693/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1232