deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0938
Published: 2020-04-15
Description: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the vulnerability could execute code remotely, aka 'Adobe Font Manager Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1020.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0938; http://packetstormsecurity.com/files/161299/Apple-CoreText-libFontParser.dylib-Stack-Corruption.html
CVE: CVE-2020-0939
Published: 2020-04-15
Description: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0939; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0939
CVE: CVE-2020-0940
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001, CVE-2020-1006, CVE-2020-1017.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0940; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0940
CVE: CVE-2020-0942
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0944, CVE-2020-1029.
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0942; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0942
CVE: CVE-2020-0943
Published: 2020-04-15
Description: An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.
CVSS Score: 4.6 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0943; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0943
CVE: CVE-2020-0944
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-1029.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0944; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0944
CVE: CVE-2020-0945
Published: 2020-04-15
Description: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0945; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0945
CVE: CVE-2020-0946
Published: 2020-04-15
Description: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0946; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0946
CVE: CVE-2020-0947
Published: 2020-04-15
Description: An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0946.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0947; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0947
CVE: CVE-2020-0948
Published: 2020-04-15
Description: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0948; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0948
CVE: CVE-2020-0949
Published: 2020-04-15
Description: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0949; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0949
CVE: CVE-2020-0950
Published: 2020-04-15
Description: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0950; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0950
CVE: CVE-2020-0952
Published: 2020-04-15
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0952; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0952
CVE: CVE-2020-0953
Published: 2020-04-15
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0953; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0953
CVE: CVE-2020-0954
Published: 2020-04-15
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0973, CVE-2020-0978.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0954; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0954
CVE: CVE-2020-0955
Published: 2020-04-15
Description: An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure in CPU Memory Access'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0955; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0955
CVE: CVE-2020-0956
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957, CVE-2020-0958.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0956; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0956
CVE: CVE-2020-0957
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0958.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0957; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0957
CVE: CVE-2020-0958
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0957.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0958; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0958
CVE: CVE-2020-0959
Published: 2020-04-15
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0959; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0959
CVE: CVE-2020-0960
Published: 2020-04-15
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0960; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0960
CVE: CVE-2020-0961
Published: 2020-04-15
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0961; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0961
CVE: CVE-2020-0962
Published: 2020-04-15
Description: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0699.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0962; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0962
CVE: CVE-2020-0964
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0964; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0964
CVE: CVE-2020-0965
Published: 2020-04-15
Description: A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0965; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0965
CVE: CVE-2020-0966
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0966; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0966
CVE: CVE-2020-0967
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0967; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0967
CVE: CVE-2020-0968
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0970.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0968; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0968; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0968
CVE: CVE-2020-0969
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0969; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0969
CVE: CVE-2020-0970
Published: 2020-04-15
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0970; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0970
CVE: CVE-2020-0971
Published: 2020-04-15
Description: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0974.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0971; https://www.zerodayinitiative.com/advisories/ZDI-20-1398/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0971
CVE: CVE-2020-0972
Published: 2020-04-15
Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0975, CVE-2020-0976, CVE-2020-0977.
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0972; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0972
CVE: CVE-2020-0973
Published: 2020-04-15
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0978.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0973; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0973
CVE: CVE-2020-0974
Published: 2020-04-15
Description: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0931, CVE-2020-0932, CVE-2020-0971.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0974; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0974
CVE: CVE-2020-0975
Published: 2020-04-15
Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0976, CVE-2020-0977.
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0975; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0975
CVE: CVE-2020-0976
Published: 2020-04-15
Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977.
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0976; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0976
CVE: CVE-2020-0977
Published: 2020-04-15
Description: A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0976.
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0977; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0977
CVE: CVE-2020-0978
Published: 2020-04-15
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0978; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0978
CVE: CVE-2020-0979
Published: 2020-04-15
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0979; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0979
CVE: CVE-2020-0980
Published: 2020-04-15
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0980; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0980
CVE: CVE-2020-0981
Published: 2020-04-15
Description: A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.The update addresses the vulnerability by correcting how Windows handles token relationships, aka 'Windows Token Security Feature Bypass Vulnerability'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/157248/Microsoft-Windows-NtFilterToken-ParentTokenId-Incorrect-Setting-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0981; http://packetstormsecurity.com/files/157248/Microsoft-Windows-NtFilterToken-ParentTokenId-Incorrect-Setting-Privilege-Escalation.html
CVE: CVE-2020-0982
Published: 2020-04-15
Description: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0987, CVE-2020-1005.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0982; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0982
CVE: CVE-2020-0983
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-1009, CVE-2020-1011, CVE-2020-1015.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0983; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0983
CVE: CVE-2020-0984
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka 'Microsoft (MAU) Office Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0984; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0984
CVE: CVE-2020-0985
Published: 2020-04-15
Description: An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0996.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0985; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0985