CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1803 Windows 10 1809 and 8 more

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability

Windows NDIS Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17068

Windows GDI+ Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17058

Microsoft Browser Memory Corruption Vulnerability

Microsoft Browser Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed

Vendors

Microsoft

Products

Edge Internet Explorer Windows 10 and 2 more

CVE-2020-17057

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1607 Windows 10 1803 and 9 more

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

Windows Network File System Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2020-17055

Windows Remote Access Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2020-17054

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 4.2 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Edge Windows 10 and 2 more

CVE-2020-17053

Internet Explorer Memory Corruption Vulnerability

Internet Explorer Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed

Vendors

Microsoft

Products

Internet Explorer Windows 10 Windows Server 2019

CVE-2020-17052

Scripting Engine Memory Corruption Vulnerability

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Edge Internet Explorer Windows 10 and 7 more

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 10.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 8 more

CVE-2020-17049

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

CVSS 3.1 · 6.6 Medium EPSS 13.8% KEV · Not listed

Vendors

Microsoft Redhat Samba

Products

Windows Server 1903 Windows Server 1909 Windows Server 2004 and 10 more

CVE-2020-17048

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

CVSS 3.1 · 4.2 Medium EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Chakracore Edge Windows 10 and 2 more

CVE-2020-17047

Windows Network File System Denial of Service Vulnerability

Windows Network File System Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 27.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

Windows Error Reporting Denial of Service Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 10 more

CVE-2020-17045

Windows KernelStream Information Disclosure Vulnerability

Windows KernelStream Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17044

Windows Remote Access Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2020-17042

Windows Print Spooler Remote Code Execution Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2020-17041

Windows Print Configuration Elevation of Privilege Vulnerability

Windows Print Configuration Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more