Uncategorized CVEs — 2020 (Page 4/32)

CVEs without a recognized CWE (not present in the CWE map or marked as N/A).

CVSS ≥ 0.0

2020-11-13

Medium

CVE-2020-0599

Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

High

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmis…

CVSS: 7.5CWE: N/A

Medium

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information.

CVSS: 6.5CWE: N/A

High

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scen…

CVSS: 7.5CWE: N/A

2020-11-12

High

CVE-2020-12350

Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

Medium

CVE-2020-12337

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

High

CVE-2020-12331

Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

Medium

CVE-2020-12328

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.

CVSS: 4.4CWE: N/A

High

CVE-2020-12325

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

High

CVE-2020-12324

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

Medium

CVE-2020-8764

Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

Medium

CVE-2020-8751

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information di…

CVSS: 4.6CWE: N/A

Medium

CVE-2020-8745

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80…

CVSS: 6.8CWE: N/A

High

CVE-2020-8739

Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

Medium

CVE-2020-8737

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially…

CVSS: 6.8CWE: N/A

Medium

CVE-2020-8694

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS: 5.5CWE: N/A

Medium

CVE-2020-8693

Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loc…

CVSS: 6.7CWE: N/A

Medium

CVE-2020-8692

Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial…

CVSS: 6.7CWE: N/A

Medium

CVE-2020-8691

A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

CVSS: 6.7CWE: N/A

Medium

CVE-2020-8690

Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loca…

CVSS: 6.7CWE: N/A

Medium

CVE-2020-8677

Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access.

CVSS: 4.4CWE: N/A

Medium

CVE-2020-8676

Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

Medium

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.

CVSS: 5.3CWE: N/A

High

CVE-2020-12321

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS: 8.8CWE: N/A

Medium

CVE-2020-12319

Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS: 6.5CWE: N/A

High

CVE-2020-12318

Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS: 7.8CWE: N/A

Medium

CVE-2020-12317

Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS: 6.5CWE: N/A

Medium

CVE-2020-12312

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow an unauthenticated user to potentially…

CVSS: 6.8CWE: N/A

Medium

CVE-2020-12311

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via phys…

CVSS: 4.6CWE: N/A

Medium

CVE-2020-12310

CVSS: 4.6CWE: N/A

Medium

CVE-2020-12308

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

CVSS: 6.5CWE: N/A

High

CVE-2020-12304

Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.

CVSS: 7.8CWE: N/A

High

CVE-2020-12297

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may al…

CVSS: 7.8CWE: N/A

Medium

CVE-2020-0593

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

Medium

CVE-2020-0591

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS: 6.7CWE: N/A

Medium

CVE-2020-0575

Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS: 5.5CWE: N/A

High

CVE-2020-11206

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus…

CVSS: 7.8CWE: N/A

Medium

CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the st…

CVSS: 5.5CWE: N/A

2020-11-11

Medium

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative u…

CVSS: 6.7CWE: CWE-16

High

CVE-2020-4685

A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the application is installed, can escalate their privilege from…

CVSS: 7.2CWE: N/A

Medium

CVE-2020-1599

Windows Spoofing Vulnerability

CVSS: 5.5CWE: N/A

Medium

CVE-2020-1325

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

CVSS: 5.4CWE: N/A

High

CVE-2020-17110

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17109

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17108

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17107

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17106

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17105

AV1 Video Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17102

WebP Image Extensions Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17101

HEIF Image Extensions Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17100

Visual Studio Tampering Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17091

Microsoft Teams Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17090

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

CVSS: 5.3CWE: N/A

High

CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17086

Raw Image Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17085

Microsoft Exchange Server Denial of Service Vulnerability

CVSS: 6.2CWE: N/A

High

CVE-2020-17082

Raw Image Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17081

Microsoft Raw Image Extension Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17079

Raw Image Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17078

Raw Image Extension Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17077

Windows Update Stack Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17076

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17075

Windows USO Core Worker Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17074

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17073

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17071

Windows Delivery Optimization Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17067

Microsoft Excel Security Feature Bypass Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17066

Microsoft Excel Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17065

Microsoft Excel Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17064

Microsoft Excel Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17063

Microsoft Office Online Spoofing Vulnerability

CVSS: 6.8CWE: N/A

High

CVE-2020-17062

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17061

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS: 8.8CWE: N/A

Medium

CVE-2020-17060

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 5.4CWE: N/A

High

CVE-2020-17057

Windows Win32k Elevation of Privilege Vulnerability

CVSS: 7.0CWE: N/A

Medium

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17055

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Critical

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

CVSS: 9.8CWE: N/A

High

CVE-2020-17047

Windows Network File System Denial of Service Vulnerability

CVSS: 7.5CWE: N/A

Medium

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

CVSS: 5.5CWE: N/A

Medium

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17044

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

CVSS: 8.8CWE: N/A

High

CVE-2020-17041

Windows Print Configuration Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17040

Windows Hyper-V Security Feature Bypass Vulnerability

CVSS: 6.5CWE: N/A

High

CVE-2020-17038

Win32k Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17037

Windows WalletService Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17036

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17035

Windows Kernel Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17034

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17033

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17032

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17031

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

Medium

CVE-2020-17029

Windows Canonical Display Driver Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17028

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17027

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17026

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17025

Windows Remote Access Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17024

Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Low

CVE-2020-17020

Microsoft Word Security Feature Bypass Vulnerability

CVSS: 3.3CWE: N/A

Medium

CVE-2020-17017

Microsoft SharePoint Information Disclosure Vulnerability

CVSS: 5.3CWE: N/A

High

CVE-2020-17016

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 8.0CWE: N/A

Medium

CVE-2020-17015

Microsoft SharePoint Server Spoofing Vulnerability

CVSS: 4.3CWE: N/A

High

CVE-2020-17014

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17013

Win32k Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17012

Windows Bind Filter Driver Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17011

Windows Port Class Library Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

High

CVE-2020-17007

Windows Error Reporting Elevation of Privilege Vulnerability

CVSS: 7.0CWE: N/A

Medium

CVE-2020-17004

Windows Graphics Component Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-17001

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS: 7.8CWE: N/A

Medium

CVE-2020-17000

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

Medium

CVE-2020-16999

Windows WalletService Information Disclosure Vulnerability

CVSS: 5.5CWE: N/A

High

CVE-2020-16998

DirectX Elevation of Privilege Vulnerability

CVSS: 7.0CWE: N/A

High

CVE-2020-16997

Remote Desktop Protocol Server Information Disclosure Vulnerability

CVSS: 7.7CWE: N/A