rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-1308 DirectX Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 1803
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1507
cpes: cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:12.000Z
CVE-2020-1309 
An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1222.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
Published: 2020-06-09T19:44:03.000Z
CVE-2020-1310 
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1253.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:03.000Z
CVE-2020-1311 
An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'.
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
Published: 2020-06-09T19:44:04.000Z
CVE-2020-1312 
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1272, CVE-2020-1277, CVE-2020-1302.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
Published: 2020-06-09T19:44:04.000Z
CVE-2020-1313 
An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
Published: 2020-06-09T19:44:05.000Z
CVE-2020-1314 
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:05.000Z
CVE-2020-1315 
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows Server 2012
Published: 2020-06-09T19:44:06.000Z
CVE-2020-1316 
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:06.000Z
CVE-2020-1317 
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:07.000Z
CVE-2020-1318 
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1320.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft SharePoint Foundation
Published: 2020-06-09T19:44:07.000Z
CVE-2020-1319 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows 10 Version 1803
vendor: Microsoft
product: Windows 10 Version 1809
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1909
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1709
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004
vendor: Microsoft
product: Windows Server version 2004
vendor: Microsoft
product: Windows 10 Version 1507
vendor: Microsoft
product: Windows 10 Version 1607
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:13.000Z
CVE-2020-1320 
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1183, CVE-2020-1297, CVE-2020-1298, CVE-2020-1318.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft SharePoint Foundation
Published: 2020-06-09T19:44:07.000Z
CVE-2020-1321 
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 32-bit Systems
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 64-bit Systems
vendor: Microsoft
product: Microsoft Office
Published: 2020-06-09T19:44:08.000Z
CVE-2020-1322 
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Project
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 64-bit Systems
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 32-bit Systems
Published: 2020-06-09T19:44:08.000Z
CVE-2020-1323 
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft SharePoint Foundation
Published: 2020-06-09T19:44:09.000Z
CVE-2020-1324 
An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1162.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:09.000Z
CVE-2020-1325 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Azure DevOps Server 2019 Update 1.1
cpes: cpe:2.3:o:microsoft:azure_devops_server:2019:update1.1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
Published: 2020-11-11T06:48:40.000Z
CVE-2020-1326 
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Azure DevOps Server
vendor: Microsoft
product: Azure DevOps Server 2019
vendor: Microsoft
product: Azure DevOps Server 2019 Update 1.1
Published: 2020-07-14T22:54:02.000Z
CVE-2020-1327 
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Azure DevOps Server
vendor: Microsoft
product: Azure DevOps Server 2019
vendor: Microsoft
product: Azure DevOps Server 2019 Update 1.1
Published: 2020-06-09T19:44:10.000Z
CVE-2020-1329 
A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Bing Search for Android
Published: 2020-06-09T19:44:10.000Z
CVE-2020-1330 
An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:02.000Z
CVE-2020-1331 
A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: System Center 2016 Operations Manager
Published: 2020-06-09T19:44:11.000Z