rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0837 ADFS MFA Elevation of Privilege Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:24.000Z
CVE-2020-0839 Windows dnsrslvr.dll Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1803
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1507
cpes: cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:24.000Z
CVE-2020-0840 
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841, CVE-2020-0849, CVE-2020-0896.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:35.000Z
CVE-2020-0841 
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0849, CVE-2020-0896.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:36.000Z
CVE-2020-0842 
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0814, CVE-2020-0843.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:36.000Z
CVE-2020-0843 
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0814, CVE-2020-0842.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:37.000Z
CVE-2020-0844 
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:37.000Z
CVE-2020-0845 
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0778, CVE-2020-0802, CVE-2020-0803, CVE-2020-0804.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
Published: 2020-03-12T15:48:38.000Z
CVE-2020-0847 
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows Server 2012
Published: 2020-03-12T15:48:38.000Z
CVE-2020-0848 
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: ChakraCore
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows Server 2019
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Published: 2020-03-12T15:48:39.000Z
CVE-2020-0849 
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:39.000Z
CVE-2020-0850 
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office 365 ProPlus
vendor: Microsoft
product: Microsoft Office Online Server
vendor: Microsoft
product: Microsoft Word
vendor: Microsoft
product: Microsoft SharePoint Foundation
Published: 2020-03-12T15:48:40.000Z
CVE-2020-0851 
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office 365 ProPlus
Published: 2020-03-12T15:48:40.000Z
CVE-2020-0852 
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Office Online Server
Published: 2020-03-12T15:48:41.000Z
CVE-2020-0853 
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory, aka 'Windows Imaging Component Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:41.000Z
CVE-2020-0854 
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-03-12T15:48:42.000Z
CVE-2020-0855 
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office 365 ProPlus
Published: 2020-03-12T15:48:42.000Z
CVE-2020-0856 Active Directory Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
cpes: cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
cpes: cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
cpes: cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2012
cpes: cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2012 R2
cpes: cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:25.000Z
CVE-2020-0857 
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
Published: 2020-03-12T15:48:42.000Z