deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-1036
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1036; https://nvidia.custhelp.com/app/answers/detail/a_id/5044
CVE: CVE-2020-1040
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1040; https://nvidia.custhelp.com/app/answers/detail/a_id/5044
CVE: CVE-2020-1041
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1042, CVE-2020-1043.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1041; https://nvidia.custhelp.com/app/answers/detail/a_id/5044
CVE: CVE-2020-1042
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1043.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1042; https://nvidia.custhelp.com/app/answers/detail/a_id/5044
CVE: CVE-2020-1043
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1043; https://nvidia.custhelp.com/app/answers/detail/a_id/5044
CVE: CVE-2020-1085
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1085; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1085
CVE: CVE-2020-1147
Published: 2020-07-14
Description: A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html; http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html; http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
CVE: CVE-2020-1240
Published: 2020-07-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1240; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1240
CVE: CVE-2020-1249
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-1415, CVE-2020-1422.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1249; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1249
CVE: CVE-2020-1267
Published: 2020-07-14
Description: This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.
CVSS Score: 4.9 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1267; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1267
CVE: CVE-2020-1326
Published: 2020-07-14
Description: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1326; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1326
CVE: CVE-2020-1330
Published: 2020-07-14
Description: An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1330; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1330
CVE: CVE-2020-1333
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'.
CVSS Score: 6.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1333; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1333
CVE: CVE-2020-1336
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1336; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1336
CVE: CVE-2020-1342
Published: 2020-07-14
Description: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-908
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342
CVE: CVE-2020-1344
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1344; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1344
CVE: CVE-2020-1346
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1346; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1346
CVE: CVE-2020-1347
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1347; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1347
CVE: CVE-2020-1349
Published: 2020-07-14
Description: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/169959/Microsoft-Outlook-2019-16.0.12624.20424-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1349; http://packetstormsecurity.com/files/169959/Microsoft-Outlook-2019-16.0.12624.20424-Remote-Code-Execution.html
CVE: CVE-2020-1350
Published: 2020-07-14
Description: A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350; http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html
CVE: CVE-2020-1351
Published: 2020-07-14
Description: An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1351; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1351
CVE: CVE-2020-1352
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows USO Core Worker Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1352; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1352
CVE: CVE-2020-1353
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-1415, CVE-2020-1422.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1353; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1353
CVE: CVE-2020-1354
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1430.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1354; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1354
CVE: CVE-2020-1355
Published: 2020-07-14
Description: A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Windows Font Driver Host handles memory., aka 'Windows Font Driver Host Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1355; https://www.zerodayinitiative.com/advisories/ZDI-20-875/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1355
CVE: CVE-2020-1356
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1356; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1356
CVE: CVE-2020-1357
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1357; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1357
CVE: CVE-2020-1358
Published: 2020-07-14
Description: An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Resource Policy Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1358; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1358
CVE: CVE-2020-1359
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1384.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1359; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1359
CVE: CVE-2020-1360
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1360; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1360
CVE: CVE-2020-1361
Published: 2020-07-14
Description: An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker would first need code execution on a victim system, aka 'Windows WalletService Information Disclosure Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1361; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1361
CVE: CVE-2020-1362
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1369.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1362; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1362
CVE: CVE-2020-1363
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Picker Platform Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1363; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1363
CVE: CVE-2020-1364
Published: 2020-07-14
Description: A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service Vulnerability'.
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1364; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1364
CVE: CVE-2020-1365
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1371.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1365; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1365
CVE: CVE-2020-1366
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1366; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1366
CVE: CVE-2020-1367
Published: 2020-07-14
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1389, CVE-2020-1419, CVE-2020-1426.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1367; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1367
CVE: CVE-2020-1368
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka 'Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1368; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1368
CVE: CVE-2020-1369
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1362.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1369; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1369
CVE: CVE-2020-1370
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-1415, CVE-2020-1422.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1370; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1370
CVE: CVE-2020-1371
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1365.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1371; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1371
CVE: CVE-2020-1372
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1372; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1372
CVE: CVE-2020-1373
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1390, CVE-2020-1427, CVE-2020-1428, CVE-2020-1438.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1373; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1373
CVE: CVE-2020-1374
Published: 2020-07-14
Description: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1374; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1374
CVE: CVE-2020-1375
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1375; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1375
CVE: CVE-2020-1381
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1382.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1381; https://www.zerodayinitiative.com/advisories/ZDI-20-872/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1381