CVEs published in May 2020
93 tracked CVEs from 3 vendors had their first vendor advisory published in May 2020: 66 high, 2 in CISA KEV. Newest first.
- Added
CVE-2020-1191High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1190High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1189High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1188High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1187High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1186High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1185High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1184High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1179Unrated
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1176High
Jet Database Engine Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1175High
Jet Database Engine Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1174High
Jet Database Engine Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1166High
Windows Clipboard Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1165High
Windows Clipboard Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1164High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1158High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1157High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1156High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1155High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1154High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1153High
Microsoft Graphics Components Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1151High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1150High
Media Foundation Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1149High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1145Medium
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1144High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1143High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1142High
Windows GDI Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1141Medium
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1140High
DirectX Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1139High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1138High
Windows Storage Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1137High
Windows Push Notification Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1136High
Media Foundation Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1135High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1134High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1132High
Windows Error Reporting Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1131Medium
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1126High
Media Foundation Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1125High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1124High
Windows State Repository Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1123Medium
Connected User Experiences and Telemetry Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1121High
Windows Clipboard Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1118High
Microsoft Windows Transport Layer Security Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1117High
Microsoft Color Management Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1116Medium
Windows CSRSS Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1114High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1113Medium
Windows Task Scheduler Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1112High
Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1111High
Windows Clipboard Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1110High
Windows Update Stack Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1109High
Windows Update Stack Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1107Unrated
Microsoft SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1106Unrated
Microsoft Office SharePoint XSS Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1105Unrated
Microsoft SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1104Unrated
Microsoft SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1103Unrated
Microsoft SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1102Unrated
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1101Unrated
Microsoft Office SharePoint XSS Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1100Unrated
Microsoft Office SharePoint XSS Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1099Unrated
Microsoft Office SharePoint XSS Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1090High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1088High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1087High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1086High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1084Medium
Connected User Experiences and Telemetry Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1082High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1081High
Windows Printer Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1079High
Microsoft Windows Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1078High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1077High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1076Medium
Windows Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1075Medium
Windows Subsystem for Linux Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1072Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1071Medium
Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1070High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1069Unrated
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1068High
Microsoft Windows Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1067High
Windows Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1061High
Microsoft Script Runtime Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1055Medium
Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1054HighCISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1051High
Jet Database Engine Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1048High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1028High
Media Foundation Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1024Unrated
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1023Unrated
Microsoft SharePoint Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1021High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-1010High
Microsoft Windows Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2020-0963Medium
Windows GDI Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2020-0909High
Windows Hyper-V Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2020-9484Unrated
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control
Apache · 2 advisories - Added
CVE-2020-3259HighCISA KEV
Cisco ASA and FTD Information Disclosure Vulnerability
Cisco · 1 advisory