CVE-2020-17088

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17077

Windows Update Stack Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1803 Windows 10 1809 and 8 more

CVE-2020-17076

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2020-17075

Windows USO Core Worker Elevation of Privilege Vulnerability

Windows USO Core Worker Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 10 more

CVE-2020-17074

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2020-17073

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 6 more

CVE-2020-17071

Windows Delivery Optimization Information Disclosure Vulnerability

Windows Delivery Optimization Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 10 more

CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1803 Windows 10 1809 and 8 more

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17058

Microsoft Browser Memory Corruption Vulnerability

Microsoft Browser Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed

Vendors

Microsoft

Products

Edge Internet Explorer Windows 10 and 2 more

CVE-2020-17057

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1607 Windows 10 1803 and 9 more

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

Windows Network File System Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2020-17055

Windows Remote Access Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2020-17054

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 4.2 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Edge Windows 10 and 2 more

CVE-2020-17053

Internet Explorer Memory Corruption Vulnerability

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed

Vendors

Microsoft

Products

Internet Explorer Windows 10 Windows Server 2019

CVE-2020-17052

Scripting Engine Memory Corruption Vulnerability

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Edge Internet Explorer Windows 10 and 7 more

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 10.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 8 more

CVE-2020-17049

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

CVSS 3.1 · 6.6 Medium EPSS 13.8% KEV · Not listed

Vendors

Microsoft Redhat Samba

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 10 more

CVE-2020-17048

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 4.2 Medium EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Edge Windows 10 and 2 more