rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-1332 Microsoft Excel Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:14.000Z
CVE-2020-1333 
An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:03.000Z
CVE-2020-1334 
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1282, CVE-2020-1304, CVE-2020-1306.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:11.000Z
CVE-2020-1335 Microsoft Excel Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office Online Server
cpes: cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office Web Apps 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:14.000Z
CVE-2020-1336 Windows Kernel Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1803
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-07-14T22:54:03.000Z
CVE-2020-1338 Microsoft Word Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft Office Online Server
cpes: cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Office 2016 for Mac
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:15.000Z
CVE-2020-1340 
A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofing Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: NuGetGallery
Published: 2020-06-09T19:44:12.000Z
CVE-2020-1342 
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Office Online Server
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 32-bit Systems
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 64-bit Systems
vendor: Microsoft
product: Microsoft Word
vendor: Microsoft
product: Microsoft Office Web Apps
Published: 2020-07-14T22:54:04.000Z
CVE-2020-1343 
An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Visual Studio Code Live Share extension
Published: 2020-06-09T19:44:12.000Z
CVE-2020-1344 
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362, CVE-2020-1369.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
Published: 2020-07-14T22:54:04.000Z
CVE-2020-1345 Microsoft Office SharePoint XSS Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2010 Service Pack 2
cpes: cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:09:15.000Z
CVE-2020-1346 
An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:05.000Z
CVE-2020-1347 
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage Services Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:05.000Z
CVE-2020-1348 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-06-09T19:44:12.000Z
CVE-2020-1349 
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 32-bit Systems
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise for 64-bit Systems
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Outlook
Published: 2020-07-14T00:00:00.000Z
CVE-2020-1350 
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
Published: 2020-07-14T22:54:06.000Z
CVE-2020-1351 
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:07.000Z
CVE-2020-1352 
An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows USO Core Worker Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:07.000Z
CVE-2020-1353 
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-1414, CVE-2020-1415, CVE-2020-1422.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:07.000Z
CVE-2020-1354 
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1430.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004 for ARM64-based Systems
vendor: Microsoft
product: Windows 10 Version 2004 for x64-based Systems
vendor: Microsoft
product: Windows Server, version 2004 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 2004 for 32-bit Systems
vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-07-14T22:54:08.000Z