Explain the CVE ID: What does the identifier CVE-2020-0585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0585.


Provide references for further information: Can you share references or external links related to CVE-2020-0585?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0585?


Explain the CVE ID: What does the identifier CVE-2020-0586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0586.

Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0586?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200611-0004/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10321'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/de/en/product_security/len-30041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0586?


Explain the CVE ID: What does the identifier CVE-2020-0587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0587.

Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0587?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201113-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0587?


Explain the CVE ID: What does the identifier CVE-2020-0588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0588.


Provide references for further information: Can you share references or external links related to CVE-2020-0588?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0588?


Explain the CVE ID: What does the identifier CVE-2020-0589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0589.


Provide references for further information: Can you share references or external links related to CVE-2020-0589?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0589?


Explain the CVE ID: What does the identifier CVE-2020-0590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0590.

Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0590?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201113-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0590?


Explain the CVE ID: What does the identifier CVE-2020-0591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0591.

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0591?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201113-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0591?


Explain the CVE ID: What does the identifier CVE-2020-0592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0592.

Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0592?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0592?


Explain the CVE ID: What does the identifier CVE-2020-0593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0593.


Provide references for further information: Can you share references or external links related to CVE-2020-0593?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0593?


Explain the CVE ID: What does the identifier CVE-2020-0594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0594.

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Provide references for further information: Can you share references or external links related to CVE-2020-0594?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200611-0007/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'name': 'VU#257161', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/257161'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.synology.com/security/advisory/Synology_SA_20_15'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/de/en/product_security/len-30041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0594?


Explain the CVE ID: What does the identifier CVE-2020-0595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0595.

Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Provide references for further information: Can you share references or external links related to CVE-2020-0595?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0595?


Explain the CVE ID: What does the identifier CVE-2020-0596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0596.

Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.


Provide references for further information: Can you share references or external links related to CVE-2020-0596?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200611-0007/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.synology.com/security/advisory/Synology_SA_20_15'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/de/en/product_security/len-30041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0596?


Explain the CVE ID: What does the identifier CVE-2020-0597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0597.

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.


Provide references for further information: Can you share references or external links related to CVE-2020-0597?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0597?


Explain the CVE ID: What does the identifier CVE-2020-0598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0598.

Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0598?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0598?


Explain the CVE ID: What does the identifier CVE-2020-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0599.

Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0599?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0599?


Explain the CVE ID: What does the identifier CVE-2020-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0600.

Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2020-0600?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0600?


Explain the CVE ID: What does the identifier CVE-2020-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0601.

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0601?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0601?


Explain the CVE ID: What does the identifier CVE-2020-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0602.

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0602?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0602'}, {'name': 'RHSA-2020:0130', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0130'}, {'name': 'RHSA-2020:0134', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0134'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0602?


Explain the CVE ID: What does the identifier CVE-2020-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0603.

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0603?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0603'}, {'name': 'RHSA-2020:0130', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0130'}, {'name': 'RHSA-2020:0134', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0134'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0603?


Explain the CVE ID: What does the identifier CVE-2020-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0604.

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to convince a target to clone a repository and open it in Visual Studio Code. Attacker-specified code would execute when the target opened the integrated terminal.
The update address the vulnerability by modifying the way Visual Studio Code handles environment variables.


Provide references for further information: Can you share references or external links related to CVE-2020-0604?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0604?


Explain the CVE ID: What does the identifier CVE-2020-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0605.

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0606.


Provide references for further information: Can you share references or external links related to CVE-2020-0605?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0605?


Explain the CVE ID: What does the identifier CVE-2020-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0606.

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605.


Provide references for further information: Can you share references or external links related to CVE-2020-0606?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0606?


Explain the CVE ID: What does the identifier CVE-2020-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0607.

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0607?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0607?


Explain the CVE ID: What does the identifier CVE-2020-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0608.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0608?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0608?


Explain the CVE ID: What does the identifier CVE-2020-0609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0609.

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.


Provide references for further information: Can you share references or external links related to CVE-2020-0609?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0609?


Explain the CVE ID: What does the identifier CVE-2020-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0610.

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.


Provide references for further information: Can you share references or external links related to CVE-2020-0610?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0610?


Explain the CVE ID: What does the identifier CVE-2020-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0611.

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0611?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0611?


Explain the CVE ID: What does the identifier CVE-2020-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0612.

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0612?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0612?


Explain the CVE ID: What does the identifier CVE-2020-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0613.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0613?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0613?


Explain the CVE ID: What does the identifier CVE-2020-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0614.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0614?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0614?


Explain the CVE ID: What does the identifier CVE-2020-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0615.

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.


Provide references for further information: Can you share references or external links related to CVE-2020-0615?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0615'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-123/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0615?


Explain the CVE ID: What does the identifier CVE-2020-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0616.

A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0616?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0616'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-124/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0616?


Explain the CVE ID: What does the identifier CVE-2020-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0617.

A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Hyper-V Denial of Service Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0617?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0617?


Explain the CVE ID: What does the identifier CVE-2020-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0618.

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0618?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0618?


Explain the CVE ID: What does the identifier CVE-2020-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0620.

An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0620?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0620?


Explain the CVE ID: What does the identifier CVE-2020-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0621.

A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update, aka 'Windows Security Feature Bypass Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0621?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0621?


Explain the CVE ID: What does the identifier CVE-2020-0622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0622.

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0622?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0622?


Explain the CVE ID: What does the identifier CVE-2020-0623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0623.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0623?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0623?


Explain the CVE ID: What does the identifier CVE-2020-0624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0624.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.


Provide references for further information: Can you share references or external links related to CVE-2020-0624?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0624?


Explain the CVE ID: What does the identifier CVE-2020-0625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0625.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0625?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0625?


Explain the CVE ID: What does the identifier CVE-2020-0626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0626.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0626?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0626?


Explain the CVE ID: What does the identifier CVE-2020-0627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0627.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0627?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0627?


Explain the CVE ID: What does the identifier CVE-2020-0628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0628.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0628?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0628?


Explain the CVE ID: What does the identifier CVE-2020-0629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0629.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0629?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0629?


Explain the CVE ID: What does the identifier CVE-2020-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0630.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0631, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0630?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0630?


Explain the CVE ID: What does the identifier CVE-2020-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0631.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0632, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0631?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0631?


Explain the CVE ID: What does the identifier CVE-2020-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0632.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0633.


Provide references for further information: Can you share references or external links related to CVE-2020-0632?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0632?


Explain the CVE ID: What does the identifier CVE-2020-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0633.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627, CVE-2020-0628, CVE-2020-0629, CVE-2020-0630, CVE-2020-0631, CVE-2020-0632.


Provide references for further information: Can you share references or external links related to CVE-2020-0633?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0633?


Explain the CVE ID: What does the identifier CVE-2020-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0634.

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0634?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0634'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-125/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0634?


Explain the CVE ID: What does the identifier CVE-2020-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0635.

An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0644.


Provide references for further information: Can you share references or external links related to CVE-2020-0635?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0635'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-143/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0635?


Explain the CVE ID: What does the identifier CVE-2020-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0636.

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0636?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0636?


Explain the CVE ID: What does the identifier CVE-2020-0637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0637.

An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information, aka 'Remote Desktop Web Access Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0637?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0637?


Explain the CVE ID: What does the identifier CVE-2020-0638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0638.

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0638?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0638?


Explain the CVE ID: What does the identifier CVE-2020-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0639.

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615.


Provide references for further information: Can you share references or external links related to CVE-2020-0639?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0639?


Explain the CVE ID: What does the identifier CVE-2020-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0640.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0640?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0640?


Explain the CVE ID: What does the identifier CVE-2020-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0641.

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0641?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0641?


Explain the CVE ID: What does the identifier CVE-2020-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0642.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.


Provide references for further information: Can you share references or external links related to CVE-2020-0642?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0642'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/158729/Microsoft-Windows-Win32k-Privilege-Escalation.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0642?


Explain the CVE ID: What does the identifier CVE-2020-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0643.

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI+ Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0643?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0643?


Explain the CVE ID: What does the identifier CVE-2020-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0644.

An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635.


Provide references for further information: Can you share references or external links related to CVE-2020-0644?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0644?


Explain the CVE ID: What does the identifier CVE-2020-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0645.

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0645?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0645?


Explain the CVE ID: What does the identifier CVE-2020-0646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0646.

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0646?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0646'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0646?


Explain the CVE ID: What does the identifier CVE-2020-0647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0647.

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0647?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0647?


Explain the CVE ID: What does the identifier CVE-2020-0648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0648.

An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how the Windows RSoP Service Application handles memory.


Provide references for further information: Can you share references or external links related to CVE-2020-0648?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0648?


Explain the CVE ID: What does the identifier CVE-2020-0650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0650.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.


Provide references for further information: Can you share references or external links related to CVE-2020-0650?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0650?


Explain the CVE ID: What does the identifier CVE-2020-0651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0651.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0653.


Provide references for further information: Can you share references or external links related to CVE-2020-0651?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0651?


Explain the CVE ID: What does the identifier CVE-2020-0652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0652.

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0652?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0652'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-127/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0652?


Explain the CVE ID: What does the identifier CVE-2020-0653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0653.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0651.


Provide references for further information: Can you share references or external links related to CVE-2020-0653?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0653?


Explain the CVE ID: What does the identifier CVE-2020-0654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0654.

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing links., aka 'Microsoft OneDrive for Android Security Feature Bypass Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0654?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0654?


Explain the CVE ID: What does the identifier CVE-2020-0655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0655.

A remote code execution vulnerability exists in Remote Desktop Services â€“ formerly known as Terminal Services â€“ when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop ServicesÂ Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0655?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0655?


Explain the CVE ID: What does the identifier CVE-2020-0656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0656.

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0656?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0656?


Explain the CVE ID: What does the identifier CVE-2020-0657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0657.

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0657?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0657?


Explain the CVE ID: What does the identifier CVE-2020-0658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0658.

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0658?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0658?


Explain the CVE ID: What does the identifier CVE-2020-0659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0659.

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0747.


Provide references for further information: Can you share references or external links related to CVE-2020-0659?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0659?


Explain the CVE ID: What does the identifier CVE-2020-0660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0660.

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0660?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0660?


Explain the CVE ID: What does the identifier CVE-2020-0661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0661.

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0751.


Provide references for further information: Can you share references or external links related to CVE-2020-0661?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0661?


Explain the CVE ID: What does the identifier CVE-2020-0662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0662.

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0662?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0662?


Explain the CVE ID: What does the identifier CVE-2020-0663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0663.

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0663?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0663?


Explain the CVE ID: What does the identifier CVE-2020-0664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0664.

An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.

To exploit this condition, an authenticated attacker would need to send a specially crafted request to the AD|DNS service. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.

The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.


Provide references for further information: Can you share references or external links related to CVE-2020-0664?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0664?


Explain the CVE ID: What does the identifier CVE-2020-0665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0665.

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0665?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0665?


Explain the CVE ID: What does the identifier CVE-2020-0666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0666.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0667, CVE-2020-0735, CVE-2020-0752.


Provide references for further information: Can you share references or external links related to CVE-2020-0666?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0666?


Explain the CVE ID: What does the identifier CVE-2020-0667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0667.

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0735, CVE-2020-0752.


Provide references for further information: Can you share references or external links related to CVE-2020-0667?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0667?


Explain the CVE ID: What does the identifier CVE-2020-0668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0668.

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.


Provide references for further information: Can you share references or external links related to CVE-2020-0668?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-257/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156576/Microsoft-Windows-Kernel-Privilege-Escalation.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/157615/Service-Tracing-Privilege-Escalation.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0668?


Explain the CVE ID: What does the identifier CVE-2020-0669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0669.

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.


Provide references for further information: Can you share references or external links related to CVE-2020-0669?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0669?


Explain the CVE ID: What does the identifier CVE-2020-0670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0670.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672.


Provide references for further information: Can you share references or external links related to CVE-2020-0670?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0670?


Explain the CVE ID: What does the identifier CVE-2020-0671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0671.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0672.


Provide references for further information: Can you share references or external links related to CVE-2020-0671?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0671?


Explain the CVE ID: What does the identifier CVE-2020-0672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0672.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0671.


Provide references for further information: Can you share references or external links related to CVE-2020-0672?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0672?


Explain the CVE ID: What does the identifier CVE-2020-0673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0673.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0673?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0673?


Explain the CVE ID: What does the identifier CVE-2020-0674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0674.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0674?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0674'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/maxpl0it/CVE-2020-0674-Exploit'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/159137/Microsoft-Internet-Explorer-11-Use-After-Free.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/161309/Microsoft-Internet-Explorer-11-Use-After-Free.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/162565/Microsoft-Internet-Explorer-8-11-Use-After-Free.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0674?


Explain the CVE ID: What does the identifier CVE-2020-0675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0675.

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0755, CVE-2020-0756.


Provide references for further information: Can you share references or external links related to CVE-2020-0675?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0675?


Explain the CVE ID: What does the identifier CVE-2020-0676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0676.

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0677, CVE-2020-0748, CVE-2020-0755, CVE-2020-0756.


Provide references for further information: Can you share references or external links related to CVE-2020-0676?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0676?


Explain the CVE ID: What does the identifier CVE-2020-0677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0677.

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0748, CVE-2020-0755, CVE-2020-0756.


Provide references for further information: Can you share references or external links related to CVE-2020-0677?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0677?


Explain the CVE ID: What does the identifier CVE-2020-0678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0678.

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0678?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0678?


Explain the CVE ID: What does the identifier CVE-2020-0679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0679.

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682.


Provide references for further information: Can you share references or external links related to CVE-2020-0679?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0679?


Explain the CVE ID: What does the identifier CVE-2020-0680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0680.

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0682.


Provide references for further information: Can you share references or external links related to CVE-2020-0680?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0680?


Explain the CVE ID: What does the identifier CVE-2020-0681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0681.

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0734.


Provide references for further information: Can you share references or external links related to CVE-2020-0681?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0681?


Explain the CVE ID: What does the identifier CVE-2020-0682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0682.

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0679, CVE-2020-0680.


Provide references for further information: Can you share references or external links related to CVE-2020-0682?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0682?


Explain the CVE ID: What does the identifier CVE-2020-0683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0683.

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.


Provide references for further information: Can you share references or external links related to CVE-2020-0683?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0683?


Explain the CVE ID: What does the identifier CVE-2020-0684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0684.

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0684?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0684?


Explain the CVE ID: What does the identifier CVE-2020-0685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0685.

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0685?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0685?


Explain the CVE ID: What does the identifier CVE-2020-0686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0686.

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0683.


Provide references for further information: Can you share references or external links related to CVE-2020-0686?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0686?


Explain the CVE ID: What does the identifier CVE-2020-0687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0687.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0687?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0687?


Explain the CVE ID: What does the identifier CVE-2020-0688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0688.

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0688?

{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-258/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156592/Microsoft-Exchange-2019-15.2.221.12-Remote-Code-Execution.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156620/Exchange-Control-Panel-Viewstate-Deserialization.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0688?


Explain the CVE ID: What does the identifier CVE-2020-0689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0689.

A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0689?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0689?


Explain the CVE ID: What does the identifier CVE-2020-0690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0690.

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0690?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0690?


Explain the CVE ID: What does the identifier CVE-2020-0691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0691.

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.


Provide references for further information: Can you share references or external links related to CVE-2020-0691?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0691?


Explain the CVE ID: What does the identifier CVE-2020-0692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0692.

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0692?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0692?


Explain the CVE ID: What does the identifier CVE-2020-0693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0693.

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694.


Provide references for further information: Can you share references or external links related to CVE-2020-0693?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0693?


Explain the CVE ID: What does the identifier CVE-2020-0694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0694.

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693.


Provide references for further information: Can you share references or external links related to CVE-2020-0694?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0694?


Explain the CVE ID: What does the identifier CVE-2020-0695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0695.

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0695?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0695?


Explain the CVE ID: What does the identifier CVE-2020-0696 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0696.

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0696?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0696?


Explain the CVE ID: What does the identifier CVE-2020-0697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0697.

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a specific location, thereby allowing arbitrary file corruption.The security update addresses the vulnerability by correcting how the process validates the log file., aka 'Microsoft Office Tampering Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0697?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0697?


Explain the CVE ID: What does the identifier CVE-2020-0698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0698.

An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0698?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0698?


Explain the CVE ID: What does the identifier CVE-2020-0699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0699.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0962.


Provide references for further information: Can you share references or external links related to CVE-2020-0699?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0699?


Explain the CVE ID: What does the identifier CVE-2020-0700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0700.

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0700?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0700?


Explain the CVE ID: What does the identifier CVE-2020-0701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0701.

An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka 'Windows Client License Service Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0701?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0701?


Explain the CVE ID: What does the identifier CVE-2020-0702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0702.

A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0702?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0702?


Explain the CVE ID: What does the identifier CVE-2020-0703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0703.

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0703?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0703?


Explain the CVE ID: What does the identifier CVE-2020-0704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0704.

An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Wireless Network Manager Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0704?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0704?


Explain the CVE ID: What does the identifier CVE-2020-0705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0705.

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0705?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0705?


Explain the CVE ID: What does the identifier CVE-2020-0706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0706.

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0706?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0706?


Explain the CVE ID: What does the identifier CVE-2020-0707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0707.

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0707?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0707?


Explain the CVE ID: What does the identifier CVE-2020-0708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0708.

A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.The security update addresses the vulnerability by correcting how the Windows Imaging Library handles memory., aka 'Windows Imaging Library Remote Code Execution Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0708?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0708?


Explain the CVE ID: What does the identifier CVE-2020-0709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0709.

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.


Provide references for further information: Can you share references or external links related to CVE-2020-0709?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0709?


Explain the CVE ID: What does the identifier CVE-2020-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0710.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0710?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0710?


Explain the CVE ID: What does the identifier CVE-2020-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0711.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0711?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0711?


Explain the CVE ID: What does the identifier CVE-2020-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0712.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0713, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0712?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0712?


Explain the CVE ID: What does the identifier CVE-2020-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0713.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0767.


Provide references for further information: Can you share references or external links related to CVE-2020-0713?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0713?


Explain the CVE ID: What does the identifier CVE-2020-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0714.

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.


Provide references for further information: Can you share references or external links related to CVE-2020-0714?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0714?


Explain the CVE ID: What does the identifier CVE-2020-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0715.

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745, CVE-2020-0792.


Provide references for further information: Can you share references or external links related to CVE-2020-0715?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0715?


Explain the CVE ID: What does the identifier CVE-2020-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0716.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0717.


Provide references for further information: Can you share references or external links related to CVE-2020-0716?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0716?


Explain the CVE ID: What does the identifier CVE-2020-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0717.

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0716.


Provide references for further information: Can you share references or external links related to CVE-2020-0717?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0717?


Explain the CVE ID: What does the identifier CVE-2020-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0718.

A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account

To exploit the vulnerability, an authenticated attacker could send malicious requests to an Active Directory integrated DNS (ADIDNS) server.

The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.


Provide references for further information: Can you share references or external links related to CVE-2020-0718?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0718?


Explain the CVE ID: What does the identifier CVE-2020-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0719.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.


Provide references for further information: Can you share references or external links related to CVE-2020-0719?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0719?


Explain the CVE ID: What does the identifier CVE-2020-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0720.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.


Provide references for further information: Can you share references or external links related to CVE-2020-0720?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0720?


Explain the CVE ID: What does the identifier CVE-2020-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0721.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.


Provide references for further information: Can you share references or external links related to CVE-2020-0721?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0721?


Explain the CVE ID: What does the identifier CVE-2020-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-0722.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.


Provide references for further information: Can you share references or external links related to CVE-2020-0722?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-0722?


Explain the CVE ID: What does the identifier CVE-2020-0723 mean in the context of cybersecurity?