February 2020 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2020-Feb
2020-Feb
Final
1.0
315
2026-02-18T14:34:36
February 2020 Security Updates
2020-02-11T08:00:00
2026-02-18T14:34:36
<p>The February security release consists of security updates for the following software:</p>
<ul>
<li>Microsoft Windows</li>
<li>Microsoft Edge (EdgeHTML-based)</li>
<li>Microsoft Edge (Chromium-based)</li>
<li>ChakraCore</li>
<li>Internet Explorer</li>
<li>Microsoft Exchange Server</li>
<li>Microsoft SQL Server</li>
<li>Microsoft Office and Microsoft Office Services and Web Apps</li>
<li>Windows Malicious Software Removal Tool</li>
<li>Windows Surface Hub</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet">Windows Lifecycle Facts Sheet</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
<li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/help/4522133/procedure-to-continue-receiving-security-updates">4522133</a> for more information.</li>
</ul>
<p><strong>The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.</strong></p>
<ul>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200003">ADV200003</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618">CVE-2020-0618</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0658">CVE-2020-0658</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0675">CVE-2020-0675</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0676">CVE-2020-0676</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0677">CVE-2020-0677</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0689">CVE-2020-0689</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0693">CVE-2020-0693</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0694">CVE-2020-0694</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0695">CVE-2020-0695</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696">CVE-2020-0696</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0697">CVE-2020-0697</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0698">CVE-2020-0698</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0705">CVE-2020-0705</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0706">CVE-2020-0706</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0714">CVE-2020-0714</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0716">CVE-2020-0716</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0717">CVE-2020-0717</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728">CVE-2020-0728</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0736">CVE-2020-0736</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0744">CVE-2020-0744</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0746">CVE-2020-0746</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0748">CVE-2020-0748</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0755">CVE-2020-0755</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0756">CVE-2020-0756</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0759">CVE-2020-0759</a></li>
</ul>
<p><strong>Known Issues</strong></p>
<table>
<thead>
<tr>
<th>KB Article</th>
<th>Applies To</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://support.microsoft.com/help/4532691">4532691</a></td>
<td>Windows 10 Version 1809, Windows Server 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4536987">4536987</a></td>
<td>Microsoft Exchange Server 2016 & 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4536988">4536988</a></td>
<td>Microsoft Exchange Server 2013</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4536989">4536989</a></td>
<td>Microsoft Exchange Server 2010</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537762">4537762</a></td>
<td>Windows 10, version 1803, Windows Server version 1803</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537764">4537764</a></td>
<td>Windows 10, version 1607, Windows Server 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537776">4537776</a></td>
<td>Windows 10</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537789">4537789</a></td>
<td>Windows 10, version 1709</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537794">4537794</a></td>
<td>Windows Server 2012 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537803">4537803</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537813">4537813</a></td>
<td>Windows 7, Windows Server 2008 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537814">4537814</a></td>
<td>Windows Server 2012 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537820">4537820</a></td>
<td>Windows 7, Windows Server 2008 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4537821">4537821</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td>
</tr>
</tbody>
</table>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 4 (QFE)
Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
ChakraCore
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems
Internet Explorer 10 on Windows Server 2012
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows Server 2012 R2
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows Server, version 1909 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 for x64-based Systems
Windows 11 for ARM64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 3
Microsoft Exchange Server 2016 Cumulative Update 14
Microsoft Exchange Server 2016 Cumulative Update 15
Microsoft Exchange Server 2019 Cumulative Update 4
Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Server 2013 Service Pack 1
Office Online Server
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Microsoft Outlook 2013 RT Service Pack 1
Microsoft Office 2019 for Mac
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2016 for Mac
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Surface Hub
Windows Malicious Software Removal Tool 32-bit
Windows Malicious Software Removal Tool 64-bit
Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1809 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for ARM64-based Systems
Adobe Flash Player on Windows Server 2019
Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1709 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1903 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1903 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1903 for ARM64-based Systems
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows 10 Version 1909 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1909 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1909 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1809 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for ARM64-based Systems
Adobe Flash Player on Windows Server 2019
Adobe Flash Player on Windows 10 Version 1709 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1903 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1903 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1903 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1909 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1909 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1909 for ARM64-based Systems
Microsoft Outlook 2013 RT Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft SharePoint Server 2013 Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems
Windows 10 for 32-bit Systems
Microsoft Office 2016 for Mac
Windows 10 for x64-based Systems
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Windows Server 2016
Office Online Server
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft SharePoint Enterprise Server 2016
ChakraCore
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 4 (QFE)
Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Windows 10 Version 1709 for ARM64-based Systems
Microsoft SharePoint Server 2019
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 3
Microsoft Exchange Server 2016 Cumulative Update 14
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows Server, version 1909 (Server Core installation)
Microsoft Exchange Server 2019 Cumulative Update 4
Microsoft Exchange Server 2016 Cumulative Update 15
Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30
Windows Malicious Software Removal Tool 64-bit
Windows Malicious Software Removal Tool 32-bit
Microsoft Surface Hub
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 for x64-based Systems
Windows 11 for ARM64-based Systems
cm1 moby-buildx 0.4.1+azure-3 on CBL Mariner 1.0
cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0
azl3 audiofile 0.3.6-27 on Azure Linux 3.0
azl3 audiofile 0.3.6-27 on Azure Linux 3.0
cbl2 qt5-qtsvg 5.12.11-3 on CBL Mariner 2.0
cbl2 python2 2.7.18-8 on CBL Mariner 2.0
cm1 python2 2.7.18-5 on CBL Mariner 1.0
cm1 qt5-qtsvg 5.12.11-2 on CBL Mariner 1.0
cm1 ruby 2.6.7-1 on CBL Mariner 1.0
cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0
cm1 kernel 5.4.91-11 on CBL Mariner 1.0
cm1 ipmitool 1.8.18-21 on CBL Mariner 1.0
cbl2 ipmitool 1.8.18-21 on CBL Mariner 2.0
cm1 cloud-init 19.1-5 on CBL Mariner 1.0
azl3 ppp 2.4.7-36 on Azure Linux 3.0
azl3 libdb 5.3.28-9 on Azure Linux 3.0
cbl2 libnotify 0.7.9-4 on CBL Mariner 2.0
cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0
azl3 valgrind 3.22.0-1 on Azure Linux 3.0
azl3 ruby 3.3.5-5 on Azure Linux 3.0
azl3 orangefs 2.9.8-3 on Azure Linux 3.0
cbl2 orangefs 2.9.8-3 on CBL Mariner 2.0
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2020-1711
Out-of-bounds Write
16843-16820
16843-16820
Moderate
16843-16820
6.0
6.0
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
16843-16820
CBL-Mariner Releases
16843-16820
No
Security Update
4.2.0-13
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16843-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
HTTP Response Splitting in Puma
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2020-5247
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
17016-16820
17016-16820
Important
17016-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
17016-16820
CBL-Mariner Releases
17016-16820
No
Security Update
2.6.7-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17016-16820
CBL-Mariner Releases
1.0
2020-09-25T00:00:00
<p>Information published.</p>
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8647
Use After Free
19156-16820
19156-16820
Moderate
19156-16820
6.1
6.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
19156-16820
CBL-Mariner Releases
19156-16820
No
Security Update
5.4.91-11
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19156-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8648
Use After Free
19156-16820
19156-16820
Important
19156-16820
7.1
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
19156-16820
CBL-Mariner Releases
19156-16820
No
Security Update
5.4.91-11
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19156-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8992
Uncontrolled Resource Consumption
19156-16820
19156-16820
Moderate
19156-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
19156-16820
CBL-Mariner Releases
19156-16820
No
Security Update
5.4.91-11
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19156-16820
CBL-Mariner Releases
1.0
2020-11-10T00:00:00
<p>Information published.</p>
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file as demonstrated by sixteen-stereo-to-eight-mono.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2015-7747
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
16847-17084
16847-16817
16847-17084
16847-16817
Important
16847-17084
Important
16847-16817
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16847-17084
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16847-16817
CBL-Mariner Releases
16847-17084
16847-16817
No
Security Update
0.3.6-27
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16847-17084
16847-16817
CBL-Mariner Releases
1.0
2024-07-23T00:00:00
<p>Information published.</p>
In Qt through 5.14.1 the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2018-21035
Allocation of Resources Without Limits or Throttling
16965-16820
16857-16823
19737-17086
17384-17086
16965-16820
16857-16823
19737-17086
17384-17086
Important
16965-16820
Important
16857-16823
19737-17086
Important
17384-17086
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16965-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16857-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
19737-17086
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17384-17086
CBL-Mariner Releases
16965-16820
No
Security Update
5.12.11-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16965-16820
CBL-Mariner Releases
CBL-Mariner Releases
16857-16823
No
Security Update
5.12.11-3
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16857-16823
CBL-Mariner Releases
1.0
2021-10-01T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added qt5-qtsvg to CBL-Mariner 2.0</p>
2.0
2026-02-18T14:24:02
<p>Information published.</p>
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-9674
Uncontrolled Resource Consumption
16906-16820
16905-16823
16906-16820
16905-16823
Important
16906-16820
Important
16905-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16906-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16905-16823
CBL-Mariner Releases
16906-16820
No
Security Update
2.7.18-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16906-16820
CBL-Mariner Releases
CBL-Mariner Releases
16905-16823
No
Security Update
2.7.18-8
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16905-16823
CBL-Mariner Releases
8.7
2024-09-26T00:00:00
<p>Information published.</p>
8.9
2024-09-28T00:00:00
<p>Information published.</p>
9.0
2024-09-29T00:00:00
<p>Information published.</p>
9.1
2024-09-30T00:00:00
<p>Information published.</p>
9.3
2024-10-02T00:00:00
<p>Information published.</p>
9.5
2024-10-04T00:00:00
<p>Information published.</p>
9.6
2024-10-05T00:00:00
<p>Information published.</p>
9.9
2024-10-08T00:00:00
<p>Information published.</p>
10.6
2024-10-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
10.8
2024-10-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.0
2024-10-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.1
2024-10-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.5
2024-10-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.6
2024-10-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.7
2024-10-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.9
2024-10-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.0
2024-10-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.1
2024-10-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.5
2024-11-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.6
2024-11-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.7
2024-11-06T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.9
2024-11-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.0
2024-11-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.1
2024-11-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.2
2024-11-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.4
2024-11-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.5
2024-11-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.6
2024-11-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.0
2024-11-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.3
2024-11-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.4
2024-11-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.6
2024-11-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.7
2024-11-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.9
2024-11-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.0
2024-11-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.1
2024-12-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.4
2024-12-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.8
2024-12-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.0
2024-12-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.4
2024-12-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.5
2024-12-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.6
2024-12-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.7
2024-12-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.8
2024-12-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.9
2024-12-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.1
2024-12-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.2
2024-12-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.8
2024-12-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.4
2025-01-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.6
2025-01-06T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.9
2025-01-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.3
2025-01-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.5
2025-01-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.6
2025-01-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.8
2025-01-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.9
2025-01-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.1
2025-01-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.2
2025-01-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.3
2025-01-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.4
2025-01-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.5
2025-01-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.6
2025-01-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.8
2025-01-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.1
2025-02-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.3
2025-02-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.4
2025-02-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.5
2025-02-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.9
2025-02-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.0
2025-02-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.2
2025-02-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.4
2025-02-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.5
2025-02-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.6
2025-02-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.1
2025-02-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.8
2025-03-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.1
2025-03-06T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.3
2025-03-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.4
2025-03-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.5
2025-03-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.6
2025-03-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.7
2025-03-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.5
2025-03-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.7
2025-03-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.2
2025-03-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.4
2025-03-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.6
2025-04-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.8
2025-04-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.1
2025-04-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.2
2025-04-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.3
2025-04-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.7
2025-04-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.8
2025-04-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.9
2025-04-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.4
2025-04-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.5
2025-04-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.9
2025-04-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.0
2025-05-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.2
2025-05-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.4
2025-05-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.5
2025-05-06T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.6
2025-05-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.9
2025-05-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.0
2025-05-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.1
2025-05-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.3
2025-05-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.4
2025-05-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.9
2025-05-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.0
2025-05-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.5
2025-05-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.6
2025-05-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
1.0
2020-08-18T00:00:00
<p>Information published.</p>
1.6
2024-06-30T07:00:00
<p>Information published.</p>
1.7
2024-07-08T00:00:00
<p>Information published.</p>
1.8
2024-07-09T00:00:00
<p>Information published.</p>
1.9
2024-07-10T00:00:00
<p>Information published.</p>
2.0
2024-07-12T00:00:00
<p>Information published.</p>
2.1
2024-07-13T00:00:00
<p>Information published.</p>
2.2
2024-07-14T00:00:00
<p>Information published.</p>
2.3
2024-07-15T00:00:00
<p>Information published.</p>
2.4
2024-07-16T00:00:00
<p>Information published.</p>
2.5
2024-07-17T00:00:00
<p>Information published.</p>
2.6
2024-07-19T00:00:00
<p>Information published.</p>
2.7
2024-07-20T00:00:00
<p>Information published.</p>
2.8
2024-07-21T00:00:00
<p>Information published.</p>
2.9
2024-07-22T00:00:00
<p>Information published.</p>
3.0
2024-07-23T00:00:00
<p>Information published.</p>
3.1
2024-07-24T00:00:00
<p>Information published.</p>
3.2
2024-07-25T00:00:00
<p>Information published.</p>
3.3
2024-07-26T00:00:00
<p>Information published.</p>
3.4
2024-07-27T00:00:00
<p>Information published.</p>
3.5
2024-07-28T00:00:00
<p>Information published.</p>
3.6
2024-07-29T00:00:00
<p>Information published.</p>
3.7
2024-08-02T00:00:00
<p>Information published.</p>
3.8
2024-08-03T00:00:00
<p>Information published.</p>
3.9
2024-08-04T00:00:00
<p>Information published.</p>
4.0
2024-08-05T00:00:00
<p>Information published.</p>
4.1
2024-08-06T00:00:00
<p>Information published.</p>
4.2
2024-08-07T00:00:00
<p>Information published.</p>
4.3
2024-08-08T00:00:00
<p>Information published.</p>
4.4
2024-08-09T00:00:00
<p>Information published.</p>
4.5
2024-08-10T00:00:00
<p>Information published.</p>
4.6
2024-08-11T00:00:00
<p>Information published.</p>
4.7
2024-08-12T00:00:00
<p>Information published.</p>
4.8
2024-08-15T00:00:00
<p>Information published.</p>
4.9
2024-08-16T00:00:00
<p>Information published.</p>
5.0
2024-08-17T00:00:00
<p>Information published.</p>
5.1
2024-08-18T00:00:00
<p>Information published.</p>
5.2
2024-08-19T00:00:00
<p>Information published.</p>
5.3
2024-08-20T00:00:00
<p>Information published.</p>
5.4
2024-08-21T00:00:00
<p>Information published.</p>
5.5
2024-08-22T00:00:00
<p>Information published.</p>
5.6
2024-08-23T00:00:00
<p>Information published.</p>
5.7
2024-08-24T00:00:00
<p>Information published.</p>
5.8
2024-08-25T00:00:00
<p>Information published.</p>
5.9
2024-08-26T00:00:00
<p>Information published.</p>
6.0
2024-08-27T00:00:00
<p>Information published.</p>
6.1
2024-08-28T00:00:00
<p>Information published.</p>
6.2
2024-08-29T00:00:00
<p>Information published.</p>
6.3
2024-08-30T00:00:00
<p>Information published.</p>
6.4
2024-08-31T00:00:00
<p>Information published.</p>
6.5
2024-09-01T00:00:00
<p>Information published.</p>
6.6
2024-09-02T00:00:00
<p>Information published.</p>
6.7
2024-09-03T00:00:00
<p>Information published.</p>
6.8
2024-09-05T00:00:00
<p>Information published.</p>
6.9
2024-09-06T00:00:00
<p>Information published.</p>
7.0
2024-09-07T00:00:00
<p>Information published.</p>
7.1
2024-09-08T00:00:00
<p>Information published.</p>
7.2
2024-09-11T00:00:00
<p>Information published.</p>
7.3
2024-09-12T00:00:00
<p>Information published.</p>
7.4
2024-09-13T00:00:00
<p>Information published.</p>
7.5
2024-09-14T00:00:00
<p>Information published.</p>
7.6
2024-09-15T00:00:00
<p>Information published.</p>
7.7
2024-09-16T00:00:00
<p>Information published.</p>
7.8
2024-09-17T00:00:00
<p>Information published.</p>
7.9
2024-09-18T00:00:00
<p>Information published.</p>
8.0
2024-09-19T00:00:00
<p>Information published.</p>
8.1
2024-09-20T00:00:00
<p>Information published.</p>
8.2
2024-09-21T00:00:00
<p>Information published.</p>
8.3
2024-09-22T00:00:00
<p>Information published.</p>
8.4
2024-09-23T00:00:00
<p>Information published.</p>
8.5
2024-09-24T00:00:00
<p>Information published.</p>
8.6
2024-09-25T00:00:00
<p>Information published.</p>
8.8
2024-09-27T00:00:00
<p>Information published.</p>
9.2
2024-10-01T00:00:00
<p>Information published.</p>
9.4
2024-10-03T00:00:00
<p>Information published.</p>
9.7
2024-10-06T00:00:00
<p>Information published.</p>
9.8
2024-10-07T00:00:00
<p>Information published.</p>
10.0
2024-10-09T00:00:00
<p>Information published.</p>
10.1
2024-10-10T00:00:00
<p>Information published.</p>
10.2
2024-10-11T00:00:00
<p>Information published.</p>
10.3
2024-10-12T00:00:00
<p>Information published.</p>
10.4
2024-10-13T00:00:00
<p>Information published.</p>
10.5
2024-10-14T00:00:00
<p>Information published.</p>
10.7
2024-10-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
10.9
2024-10-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.2
2024-10-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.3
2024-10-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.4
2024-10-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
11.8
2024-10-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.2
2024-10-31T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.3
2024-11-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.4
2024-11-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
12.8
2024-11-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.3
2024-11-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.7
2024-11-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.8
2024-11-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
13.9
2024-11-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.1
2024-11-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.2
2024-11-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.5
2024-11-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
14.8
2024-11-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.2
2024-12-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.3
2024-12-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.5
2024-12-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.6
2024-12-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.7
2024-12-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
15.9
2024-12-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.1
2024-12-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.2
2024-12-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
16.3
2024-12-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.0
2024-12-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.3
2024-12-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.4
2024-12-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.5
2024-12-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.6
2024-12-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.7
2024-12-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
17.9
2024-12-30T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.0
2024-12-31T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.1
2025-01-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.2
2025-01-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.3
2025-01-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.5
2025-01-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.7
2025-01-07T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
18.8
2025-01-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.0
2025-01-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.1
2025-01-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.2
2025-01-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.4
2025-01-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
19.7
2025-01-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.0
2025-01-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.7
2025-01-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
20.9
2025-02-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.0
2025-02-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.2
2025-02-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.6
2025-02-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.7
2025-02-10T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
21.8
2025-02-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.1
2025-02-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.3
2025-02-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.7
2025-02-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.8
2025-02-21T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
22.9
2025-02-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.0
2025-02-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.2
2025-02-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.3
2025-02-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.4
2025-02-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.5
2025-02-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.6
2025-03-01T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.7
2025-03-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
23.9
2025-03-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.0
2025-03-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.2
2025-03-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.8
2025-03-14T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
24.9
2025-03-15T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.0
2025-03-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.1
2025-03-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.2
2025-03-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.3
2025-03-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.4
2025-03-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.6
2025-03-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.8
2025-03-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
25.9
2025-03-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.0
2025-03-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.1
2025-03-27T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.3
2025-03-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.5
2025-03-31T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.7
2025-04-03T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
26.9
2025-04-05T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.0
2025-04-06T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.4
2025-04-11T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.5
2025-04-12T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
27.6
2025-04-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.0
2025-04-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.1
2025-04-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.2
2025-04-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.3
2025-04-20T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.6
2025-04-26T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.7
2025-04-28T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
28.8
2025-04-29T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.1
2025-05-02T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.3
2025-05-04T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.7
2025-05-08T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
29.8
2025-05-09T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.2
2025-05-13T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.5
2025-05-16T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.6
2025-05-17T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.7
2025-05-18T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
30.8
2025-05-19T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.1
2025-05-22T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.2
2025-05-23T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.3
2025-05-24T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
31.4
2025-05-25T00:00:00
<p>Added python2 to CBL-Mariner 1.0</p>
A vulnerability exists in Docker before 1.2 via container names which may collide with and override container IDs.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2014-5278
16833-16820
16833-16820
Moderate
16833-16820
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
16833-16820
CBL-Mariner Releases
16833-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16833-16820
CBL-Mariner Releases
1.0
2021-07-16T00:00:00
<p>Information published.</p>
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-9327
NULL Pointer Dereference
19212-17084
19212-17084
Important
19212-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
19212-17084
1.0
2025-09-03T21:18:51
<p>Information published.</p>
1.1
2026-02-18T14:34:36
<p>Information published.</p>
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2014-4607
Integer Overflow or Wraparound
20184-17084
20184-17084
Important
20184-17084
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
20184-17084
1.0
2025-09-03T22:36:44
<p>Information published.</p>
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
hackerone
Yes
CVE-2020-8127
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
20249-17084
20250-17086
20249-17084
20250-17086
Moderate
20249-17084
Moderate
20250-17086
6.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
20249-17084
6.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
20250-17086
1.0
2025-09-03T23:54:11
<p>Information published.</p>
1.1
2026-02-18T14:01:33
<p>Information published.</p>
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
hackerone
Yes
CVE-2020-8130
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
20244-17084
20244-17084
Moderate
20244-17084
6.4
6.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
20244-17084
1.0
2025-10-12T01:01:15
<p>Information published.</p>
remote code execution vulnerability in ipmitool
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
GitHub_M
Yes
CVE-2020-5208
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
19175-16820
19176-16823
19175-16820
19176-16823
Important
19175-16820
Important
19176-16823
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
19175-16820
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
19176-16823
CBL-Mariner Releases
19175-16820
19176-16823
No
Security Update
1.8.18-21
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19175-16820
19176-16823
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added ipmitool to CBL-Mariner 2.0</p>
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8597
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
19207-17084
19207-17084
Critical
19207-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19207-17084
CBL-Mariner Releases
19207-17084
No
Security Update
2.4.7-36
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19207-17084
CBL-Mariner Releases
1.0
2024-07-23T00:00:00
<p>Information published.</p>
cloud-init through 19.4 relies on Mersenne Twister for a random password which makes it easier for attackers to predict passwords because rand_str in cloudinit/util.py calls the random.choice function.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8631
Use of Insufficiently Random Values
19182-16820
19182-16820
Moderate
19182-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
19182-16820
CBL-Mariner Releases
19182-16820
No
Security Update
19.1-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19182-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
In cloud-init through 19.4 rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value which makes it easier for attackers to guess passwords.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8632
Weak Password Requirements
19182-16820
19182-16820
Moderate
19182-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
19182-16820
CBL-Mariner Releases
19182-16820
No
Security Update
19.1-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19182-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-8649
Use After Free
19156-16820
19156-16820
Moderate
19156-16820
5.9
5.9
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
19156-16820
CBL-Mariner Releases
19156-16820
No
Security Update
5.4.91-11
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19156-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it aka CID-2e90ca68b0d2.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2020-9383
Out-of-bounds Read
19156-16820
19156-16820
Important
19156-16820
7.1
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
19156-16820
CBL-Mariner Releases
19156-16820
No
Security Update
5.4.91-11
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19156-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2013-7381
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
19233-16823
19233-16823
Critical
19233-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19233-16823
CBL-Mariner Releases
19233-16823
No
Security Update
0.7.9-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19233-16823
CBL-Mariner Releases
1.0
2025-10-01T23:10:53
<p>Information published.</p>
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account.</p>
<p>To exploit the vulnerability, an authenticated attacker would need to submit a specially crafted page request to an affected Reporting Services instance.</p>
<p>The security update addresses the vulnerability by modifying how the Microsoft SQL Server Reporting Services handles page requests.</p>
<p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p>
<ul>
<li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see Microsoft Knowledge Base Article <a href="https://support.microsoft.com/en-us/help/321185">321185 - How to determine the version, edition, and update level of SQL Server and its components.</a></li>
<li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li>
</ul>
<p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p>
<table>
<thead>
<tr>
<th>Update number</th>
<th>Title</th>
<th>Apply if current product version is…</th>
<th>This security update also includes servicing releases up through…</th>
</tr>
</thead>
<tbody>
<tr>
<td>4532097</td>
<td>Security update for SQL Server 2016 Service Pack 2 (GDR): Feb 11, 2020</td>
<td>13.0.5026.0 - 13.0.5101.9</td>
<td>KB4505220 - Previous SQL16 SP2 GDR</td>
</tr>
<tr>
<td>4535706</td>
<td>Security update for SQL Server 2016 Service Pack 2 CU11: Feb 11, 2020</td>
<td>13.0.5149.0 - 13.0.5598.27</td>
<td>KB4527378 – SQL16 SP2 CU11</td>
</tr>
<tr>
<td>4532095</td>
<td>Security update for SQL Server 2014 Service Pack 3 (GDR): Feb 11, 2020</td>
<td>12.0.6024.0 - 12.0.6108.1</td>
<td>KB4505218 - Previous SQL14 SP3 GDR</td>
</tr>
<tr>
<td>4535288</td>
<td>Security update for SQL Server 2014 Service Pack 2 CU4: Feb 11, 2020</td>
<td>12.0.6205.1 - 12.0.6329.1</td>
<td>KB4500181 – SQL14 SP3 CU4</td>
</tr>
<tr>
<td>4532098</td>
<td>Security update for SQL Server 2012 Service Pack 4 (QFE): Feb 11, 2020</td>
<td>11.0.7001.0 - 11.0.7462.6</td>
<td>KB4057116 – Previous SQL12 SP4 QFE</td>
</tr>
</tbody>
</table>
<p><strong>What are the GDR and CU update designations and how do they differ?</strong></p>
<p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p>
<ul>
<li>GDR updates – cumulatively only contain security updates for the given baseline.</li>
<li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li>
</ul>
<p>For any given baseline, either the GDR or CU updates could be options (see below).</p>
<ul>
<li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li>
<li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li>
<li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li>
<li>NOTE: You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</li>
</ul>
<p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p>
<p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p>
SQL Server
Microsoft
CVE-2020-0618
11476
11477
11667
11668
11554
11555
11671
11672
Remote Code Execution
11476
Remote Code Execution
11477
Remote Code Execution
11667
Remote Code Execution
11668
Remote Code Execution
11554
Remote Code Execution
11555
Remote Code Execution
11671
Remote Code Execution
11672
Important
11476
Important
11477
Important
11667
Important
11668
Important
11554
Important
11555
Important
11671
Important
11672
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4532098
https://download.microsoft.com/download/5/6/b/56bfd2a1-48db-434a-9572-4d8dbf7ef047/SQLServer2012-KB4532098-x86.exe
4057113
11476
Maybe
Security Update
4532098
https://download.microsoft.com/download/5/6/b/56bfd2a1-48db-434a-9572-4d8dbf7ef047/SQLServer2012-KB4532098-x64.exe
4057113
11477
Maybe
Security Update
4532095
https://download.microsoft.com/download/2/d/d/2ddc7094-0c7a-40b0-accf-07a5f57e0040/SQLServer2014-KB4532095-x64.exe
4505218
11667
Maybe
Security Update
4535288
https://download.microsoft.com/download/4/b/6/4b623928-0e26-4e4f-9d31-9974af8ac8ba/SQLServer2014-KB4535288-x64.exe
4500181
11668
Maybe
Security Update
4535706
https://download.microsoft.com/download/9/f/a/9fa97512-ff9b-466a-918e-d95214fbfceb/SQLServer2016-KB4535706-x64.exe
4527378
11554
Maybe
Security Update
4535706
https://support.microsoft.com/help/4535706
11554
4532097
https://download.microsoft.com/download/6/d/8/6d8acd3e-e624-4256-8265-07c39b25e9ad/SQLServer2016-KB4532097-x64.exe
4505220
11555
Maybe
Security Update
4532097
https://support.microsoft.com/help/4532097
11555
4532095
https://download.microsoft.com/download/2/d/d/2ddc7094-0c7a-40b0-accf-07a5f57e0040/SQLServer2014-KB4532095-x86.exe
4505218
11671
Maybe
Security Update
4535288
https://download.microsoft.com/download/4/b/6/4b623928-0e26-4e4f-9d31-9974af8ac8ba/SQLServer2014-KB4535288-x86.exe
4500181
11672
Maybe
Security Update
Soroush Dalili (<a href="https://twitter.com/irsdl">@irsdl</a>)
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-09-22T07:00:00
<p>Corrected version reference in FAQ. This is an informational change only.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2020-0767
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
10724-11714
10724-11712
10724-11713
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10724-11714
Remote Code Execution
10724-11712
Remote Code Execution
10724-11713
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10724-11714
Critical
10724-11712
Critical
10724-11713
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11714
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-11713
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.16
11447
Maybe
Security Update
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10724-11453
10724-11454
10724-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10724-11453
10724-11454
10724-11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11714
10724-11712
10724-11713
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10724-10729
10724-10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10724-10729
10724-10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10724-10852
10724-10853
10724-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
<a href="https://twitter.com/bkth_">Bruno Keith</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Remote Desktop Services Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection. An attacker who successfully exploited this vulnerability could execute arbitrary code on the victim system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker must already have compromised a system running Remote Desktop Services, and then wait for a victim system to connect to Remote Desktop Services.</p>
<p>The update addresses the vulnerability by correcting how Remote Desktop Services handles clipboard redirection.</p>
Windows Shell
Microsoft
CVE-2020-0655
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
11923
11924
11926
11927
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11926
Remote Code Execution
11927
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Important
11923
Important
11924
Important
11926
Important
11927
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
8.0
7.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
5008223
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008223
5007205
11923
11924
Yes
Security Update
10.0.20348.405
5008223
https://support.microsoft.com/help/5008223
11923
11924
5008215
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008215
11926
11927
Yes
Security Update
10.0.22000.376
<a href="https://twitter.com/vv474172261">VictorV(Tangtianwen)</a> with Kunlun Lab
Eyal Itkin from Check Point Research
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-20T08:00:00
<p>Updated acknowledgment.</p>
2.0
2021-12-14T08:00:00
<p>The following revisions have been made: 1) In the Security Updates table, added Windows 11 for x64-based Systems, Windows 11 for ARM64-based Systems, Windows Server 2022, and Windows Server 2022 (Server Core installation) as these versions of Windows are affected by this vulnerability. Customers running Windows 11 or Windows Server 2022 should install the December 2021 security updates to be protected from this vulnerability. 2) Added an acknowledgement.</p>
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.</p>
<p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p>
<p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
Windows RDP
Microsoft
CVE-2020-0660
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
11712
11713
11714
11715
Denial of Service
11497
Denial of Service
11498
Denial of Service
11499
Denial of Service
11563
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11453
Denial of Service
11454
Denial of Service
11583
Denial of Service
11644
Denial of Service
11645
Denial of Service
11646
Denial of Service
11647
Denial of Service
10729
Denial of Service
10735
Denial of Service
10852
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Denial of Service
11712
Denial of Service
11713
Denial of Service
11714
Denial of Service
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Microsoft Platform Security Assurance & Vulnerability Research
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Windows Hyper-V
Microsoft
CVE-2020-0661
11569
11571
11572
11647
10853
10816
10855
11713
11715
Denial of Service
11569
Denial of Service
11571
Denial of Service
11572
Denial of Service
11647
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
11713
Denial of Service
11715
Important
11569
Important
11571
Important
11572
Important
11647
Important
10853
Important
10816
Important
10855
Important
11713
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11713
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11715
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11569
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11569
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11647
11713
11715
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10853
10816
10855
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Internet Connection Sharing Service Remote Code Execution Vulnerability
<p>A memory corruption vulnerability exists in the Internet Connection Sharing (ICS) service when an attacker sends specially crafted packets to the server. An attacker who successfully exploited the vulnerability could run arbitrary code on the server with elevated privileges.</p>
<p>To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.</p>
<p>The security update addresses the vulnerability by correcting how the Internet Connection Sharing (ICS) service handles network packets.</p>
Windows Hyper-V
Microsoft
CVE-2020-0662
11498
11499
11569
11571
11572
11454
11645
11647
10735
10853
10816
10855
10048
10482
9318
9344
10051
10049
10378
10379
10483
10543
11713
11715
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11569
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11454
Remote Code Execution
11645
Remote Code Execution
11647
Remote Code Execution
10735
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10048
Remote Code Execution
10482
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11713
Remote Code Execution
11715
Critical
11498
Critical
11499
Critical
11569
Critical
11571
Critical
11572
Critical
11454
Critical
11645
Critical
11647
Critical
10735
Critical
10853
Critical
10816
Critical
10855
Critical
10048
Critical
10482
Critical
9318
Critical
9344
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11713
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10048
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9318
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9344
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11713
8.6
7.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11498
11499
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11498
11499
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11569
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11569
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11454
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11454
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11645
11647
11713
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10482
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10482
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Quan Luo and Zhiyi Zhang from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-12T08:00:00
<p>Corrected the CVE description and title. This is an informational change only.</p>
Microsoft Edge Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.</p>
<p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site. An attacker who successfully exploited this vulnerability could elevate privileges in affected versions of Microsoft Edge.</p>
<p>The security update addresses the vulnerability by helping to ensure that cross-domain policies are properly enforced in Microsoft Edge.</p>
Microsoft Edge (HTML-based)
Microsoft
CVE-2020-0663
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Elevation of Privilege
10724-11497
Elevation of Privilege
10724-11498
Elevation of Privilege
10724-11563
Elevation of Privilege
10724-11568
Elevation of Privilege
10724-11569
Elevation of Privilege
10724-11570
Elevation of Privilege
10724-11571
Elevation of Privilege
10724-11644
Elevation of Privilege
10724-11645
Elevation of Privilege
10724-11646
Elevation of Privilege
10724-11712
Elevation of Privilege
10724-11713
Elevation of Privilege
10724-11714
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11644
Important
10724-11645
Important
10724-11646
Important
10724-11712
Important
10724-11713
Important
10724-11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11713
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11714
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Yes
Security Update
Jiantao Li (<a href="http://twitter.com/CurseRed">@CurseRed</a>) of Tencent Security Yunding Lab
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Active Directory Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way Active Directory handles information for domains in a transitively trusted forest. To exploit this vulnerability, an attacker would first need to compromise a transitively trusted Active Directory forest.</p>
<p>An attacker who successfully exploited this vulnerability could obtain administrative rights on a computer in a domain which trusts the Active Directory forest under the attacker's control.</p>
<p>This update addresses the vulnerability by correcting how Active Directory handles information for domains in transitively trusted forests.</p>
Windows Authentication Methods
Microsoft
CVE-2020-0665
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
6.6
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Dirk-jan Mollema (<a href="https://twitter.com/_dirkjan">@_dirkjan</a>)
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-12T08:00:00
<p>Corrected the CVE description and title. This is an informational change only.</p>
Windows Search Indexer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Search Indexer properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0666
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Shefang Zhong of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Search Indexer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Search Indexer properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0667
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Shefang Zhong of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0668
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Clement Labro working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0669
11497
11498
11499
11563
11568
11569
11570
11571
11572
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0670
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0671
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0672
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Internet Explorer
Microsoft
CVE-2020-0673
10555-10378
10336-9312
10336-9318
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11712
10486-11713
10486-11714
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11712
Remote Code Execution
10486-11713
Remote Code Execution
10486-11714
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11712
Critical
10486-11713
Critical
10486-11714
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11713
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10555-10378
10486-10378
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10555-10378
10486-10378
4537767
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537767
4534251
10555-10378
10336-9312
10336-9318
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
Yes
IE Cumulative
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
10336-9312
10336-9318
Yes
Monthly Rollup
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10486-11497
10486-11498
10486-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10486-11497
10486-11498
10486-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10486-11568
10486-11569
10486-11570
10486-11571
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10486-11712
10486-11713
10486-11714
10486-11644
10486-11645
10486-11646
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10486-11453
10486-11454
10486-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10486-11453
10486-11454
10486-11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10486-10729
10486-10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10486-10729
10486-10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10486-10852
10486-10853
10486-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10486-10852
10486-10853
10486-10816
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4537767
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537767
4534251
10486-10047
Yes
IE Cumulative
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10486-10481
10486-10482
10486-10483
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
4537821
4534297
10486-10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0675
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0676
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0677
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Error Reporting Manager Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The security update addresses the vulnerability by correcting how Windows Error Reporting manager handles hard links.</p>
Microsoft Windows
Microsoft
CVE-2020-0678
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Clément Lavoillotte (<a href="https://twitter.com/clavoillotte">@clavoillotte</a>) of <a href="https://offsec.almond.consulting/">Almond</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Function Discovery Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Function Discovery Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0679
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Function Discovery Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Function Discovery Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0680
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Remote Desktop Client Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would need to have control of a server and then convince a user to connect to it. An attacker would have no way of forcing a user to connect to the malicious server, they would need to trick the user into connecting via social engineering, DNS poisoning or using a Man in the Middle (MITM) technique. An attacker could also compromise a legitimate server, host malicious code on it, and wait for the user to connect.</p>
<p>The update addresses the vulnerability by correcting how the Windows Remote Desktop Client handles connection requests.</p>
Microsoft Windows
Microsoft
CVE-2020-0681
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9318
Critical
9344
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11712
Critical
11713
Critical
11714
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="http://c00c.cc/" >ZhangSen</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Function Discovery Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Function Discovery Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0682
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Installer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links. An attacker who successfully exploited this vulnerability could bypass access restrictions to add or remove files.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and add or remove files.</p>
<p>The security update addresses the vulnerability by modifying how reparse points are handled by the Windows Installer.</p>
Windows Installer
Microsoft
CVE-2020-0683
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="https://www.linkedin.com/in/chrisdanieli/">Christian Danieli</a> (<a href="https://twitter.com/padovah4ck">@padovah4ck</a>)
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows COM Server Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows COM Server creates COM objects.</p>
Microsoft Windows
Microsoft
CVE-2020-0685
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Installer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links. An attacker who successfully exploited this vulnerability could bypass access restrictions to add or remove files.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and add or remove files.</p>
<p>The security update addresses the vulnerability by modifying how reparse points are handled by the Windows Installer.</p>
Windows Installer
Microsoft
CVE-2020-0686
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Polar Bear
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Exchange Validation Key Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time.</p>
<p>Knowledge of a the validation key allows an authenticated user with a mailbox to pass arbitrary objects to be deserialized by the web application, which runs as SYSTEM.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Exchange creates the keys during install.</p>
Microsoft Exchange Server
Microsoft
CVE-2020-0688
11682
11704
11705
11732
11731
11733
Remote Code Execution
11682
Remote Code Execution
11704
Remote Code Execution
11705
Remote Code Execution
11732
Remote Code Execution
11731
Remote Code Execution
11733
Important
11682
Important
11704
Important
11705
Important
11732
Important
11731
Important
11733
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4536988
https://www.microsoft.com/download/details.aspx?familyid=ddba43d0-f66d-410d-a421-bb26e45d64b7
4523171
11682
Maybe
Security Update
4536988
https://support.microsoft.com/help/4536988
11682
4536987
https://www.microsoft.com/download/details.aspx?familyid=dec0d147-8b43-4fee-94cb-ed43ed1226ad
4523171
11704
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11732
11731
4536987
https://www.microsoft.com/download/details.aspx?familyid=5ae7346b-f59c-415d-b576-e50f6b493a23
4523171
11705
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11732
11731
4536987
https://www.microsoft.com/download/details.aspx?familyid=a4bd9a4e-56f4-42c2-b0d7-fffe52c5dbe5
4523171
11732
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11732
11731
4536987
https://www.microsoft.com/download/details.aspx?familyid=6f5e2305-f1dc-4ce9-97c5-4d6fc1b87a24
4523171
11731
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11732
11731
4536989
https://www.microsoft.com/download/details.aspx?familyid=4d072d3e-153e-4a5a-859e-ad054fe24107
4509410
11733
Maybe
Security Update
4536989
https://support.microsoft.com/help/4536989
11733
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-11T08:00:00
<p>Corrected the CVE description and title. This is an informational change only.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
Microsoft
CVE-2020-0691
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
Yes
Security Update
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Office SharePoint XSS Vulnerability
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>
<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office SharePoint
Microsoft
CVE-2020-0693
10950
11585
10607
Spoofing
10950
Spoofing
11585
Spoofing
10607
Important
10950
Important
11585
Important
10607
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4484255
https://www.microsoft.com/download/details.aspx?familyid=ea83624c-51ed-445c-8cc2-f0b6ee7fa6a2
4484143
10950
Maybe
Security Update
4484259
https://www.microsoft.com/download/details.aspx?familyid=9a476517-d06e-43a7-b6c4-2db3f6a0e2c4
4484142
11585
Maybe
Security Update
4484264
https://www.microsoft.com/download/details.aspx?familyid=7ea9204f-8462-4d02-a9fa-38b4e2a83128
4484157
10607
Maybe
Security Update
Huynh Phuoc Hung, <a href="https://twitter.com/hph0var">@hph0var</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Office SharePoint XSS Vulnerability
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>
<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office SharePoint
Microsoft
CVE-2020-0694
10950
11585
10607
Spoofing
10950
Spoofing
11585
Spoofing
10607
Important
10950
Important
11585
Important
10607
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4484255
https://www.microsoft.com/download/details.aspx?familyid=ea83624c-51ed-445c-8cc2-f0b6ee7fa6a2
4484143
10950
Maybe
Security Update
4484259
https://www.microsoft.com/download/details.aspx?familyid=9a476517-d06e-43a7-b6c4-2db3f6a0e2c4
4484142
11585
Maybe
Security Update
4484264
https://www.microsoft.com/download/details.aspx?familyid=7ea9204f-8462-4d02-a9fa-38b4e2a83128
4484157
10607
Maybe
Security Update
Huynh Phuoc Hung, <a href="https://twitter.com/hph0var">@hph0var</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Office Online Server Spoofing Vulnerability
<p>A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly. An attacker could exploit the vulnerability by sending a specially crafted request to an affected site.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-origin attacks on affected systems. These attacks could allow the attacker to read content that the attacker is not authorized to read, and use the victim's identity to take actions on the site on behalf of the victim. The victim needs to be authenticated for an attacker to compromise the victim.</p>
<p>The security update addresses the vulnerability by ensuring that Office Online Server properly validates origins.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
Microsoft
CVE-2020-0695
10836
Spoofing
10836
Important
10836
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4484254
https://www.microsoft.com/download/details.aspx?familyid=8d0e3010-114c-450d-8782-2cdb418c7716
4484141
10836
Maybe
Security Update
SURESH C
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Outlook Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the security feature bypass vulnerability and run arbitrary code.</p>
<p>To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URI with an affected version of Microsoft Outlook software.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Outlook handles the parsing of URI formats.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Exchange Server
Microsoft
CVE-2020-0696
11573
11574
11577
11578
10765
10766
10810
10811
10527
10528
10407
Security Feature Bypass
11573
Security Feature Bypass
11574
Security Feature Bypass
11577
Security Feature Bypass
11578
Security Feature Bypass
10765
Security Feature Bypass
10766
Security Feature Bypass
10810
Security Feature Bypass
10811
Security Feature Bypass
10527
Security Feature Bypass
10528
Security Feature Bypass
10407
Important
11573
Important
11574
Important
11577
Important
11578
Important
10765
Important
10766
Important
10810
Important
10811
Important
10527
Important
10528
Important
10407
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11577
11578
No
Security Update
4484250
https://www.microsoft.com/download/details.aspx?familyid=3792ae4a-c3d4-4d87-be7e-b98d46a08b8d
4475553
10765
Maybe
Security Update
4484250
https://www.microsoft.com/download/details.aspx?familyid=643898bb-6d46-4ad5-8ff4-3e770b4e2e98
4475553
10766
Maybe
Security Update
4484156
https://www.microsoft.com/download/details.aspx?familyid=e3a94a6e-0e63-4810-84ff-5035eebb17c4
4475563
10810
Maybe
Security Update
4484156
https://www.microsoft.com/download/details.aspx?familyid=8fc088de-ac47-4f12-bca8-7e5edf5c2c51
4475563
10811
Maybe
Security Update
4484163
https://www.microsoft.com/download/details.aspx?familyid=9f8d3585-c6e9-4ff1-b5bb-424653060c27
4475573
10527
10528
Maybe
Security Update
4484156
4475563
10407
Maybe
Security Update
<a href="https://www.resecurity.com">Resecurity Inc.</a> <a href="https://twitter.com/resecurity_com">@resecurity_com</a>
<a href="https://twitter.com/reegun21/">Reegun Richard J</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Office Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.</p>
<p>To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a specific location, thereby allowing arbitrary file corruption.</p>
<p>The security update addresses the vulnerability by correcting how the process validates the log file.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
Microsoft
CVE-2020-0697
11577
11578
Tampering
11577
Tampering
11578
Important
11577
Important
11578
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11577
11578
No
Security Update
Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Client License Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Client License Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0701
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
Shefang Zhong of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Surface Hub Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Surface Hub when prompting for credentials. Successful exploitation of the vulnerability could allow an attacker to access settings which are restricted to Administrators.</p>
<p>To exploit the vulnerability, an attacker would need to have physical access to a Surface Hub.</p>
<p>The update addresses the vulnerability by correcting how credentials are validated when accessing restricted settings.</p>
Windows Shell
Microsoft
CVE-2020-0702
11739
Security Feature Bypass
11739
Important
11739
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4537765
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537765
11739
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2020-0710
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10852
10724-10853
10724-10816
10724-11712
10724-11713
10724-11714
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10724-11712
Remote Code Execution
10724-11713
Remote Code Execution
10724-11714
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10724-11712
Critical
10724-11713
Critical
10724-11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11713
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11714
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.16
11447
Maybe
Security Update
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10724-11453
10724-11454
10724-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10724-11453
10724-11454
10724-11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10724-10852
10724-10853
10724-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10724-10852
10724-10853
10724-10816
zhunki from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2020-0711
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-11712
Remote Code Execution
10724-11713
Remote Code Execution
10724-11714
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-11712
Critical
10724-11713
Critical
10724-11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11713
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11714
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.16
11447
Maybe
Security Update
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Yes
Security Update
MoonLiang of <a href="https://xlab.tencent.com/">Tencent Security Xuanwu Lab</a>
Looben Yang
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2020-0712
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10852
10724-10853
10724-10816
10724-11712
10724-11713
10724-11714
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10724-11712
Remote Code Execution
10724-11713
Remote Code Execution
10724-11714
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10724-11712
Critical
10724-11713
Critical
10724-11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11713
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11714
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.16
11447
Maybe
Security Update
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10724-11453
10724-11454
10724-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10724-11453
10724-11454
10724-11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10724-10852
10724-10853
10724-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10724-10852
10724-10853
10724-10816
zhunki from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2020-0713
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10852
10724-10853
10724-10816
10724-11712
10724-11713
10724-11714
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10724-11712
Remote Code Execution
10724-11713
Remote Code Execution
10724-11714
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10724-11712
Critical
10724-11713
Critical
10724-11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11712
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11713
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11714
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.16
11447
Maybe
Security Update
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10724-11453
10724-11454
10724-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10724-11453
10724-11454
10724-11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10724-10852
10724-10853
10724-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10724-10852
10724-10853
10724-10816
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.</p>
<p>To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.</p>
Microsoft Windows
Microsoft
CVE-2020-0727
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
Wenxu Wu <a href="https://twitter.com/ma7h1as">(@ma7h1as)</a> of <a href="http://xlab.tencent.com">Tencent Security Xuanwu Lab</a>
Jonas Lykkegård
Jarvis_1oop of Pinduoduo Security Research Lab
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Modules Installer Service Information Disclosure Vulnerability
<p>An information vulnerability exists when Windows Modules Installer Service improperly discloses file information. Successful exploitation of the vulnerability could allow the attacker to read any file on the file system.</p>
<p>To exploit the vulnerability, an attacker would have to log onto an affected system and run a specially crafted application.</p>
<p>The update addresses the vulnerability by changing the way Windows Modules Installer Service discloses file information.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p>
Windows Installer
Microsoft
CVE-2020-0728
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10852
10853
10816
10855
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11497
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11498
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11499
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11563
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11568
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11569
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11570
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11571
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11572
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11453
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11454
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11583
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11644
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11645
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11646
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11647
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10852
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10853
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10816
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10855
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11712
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11713
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11714
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
Edward Torkington of NCC Group <a>https://www.nccgroup.trust/</a>
<a href=https://www.linkedin.com/in/imre-rad-2358749b/>Imre Rad</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
LNK Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.</p>
<p>An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>The attacker could present to the user a removable drive, or remote share, that contains a malicious .LNK file and an associated malicious binary. When the user opens this drive(or remote share) in Windows Explorer, or any other application that parses the .LNK file, the malicious binary will execute code of the attacker’s choice, on the target system.</p>
<p>The security update addresses the vulnerability by correcting the processing of shortcut LNK references.</p>
Windows Shell
Microsoft
CVE-2020-0729
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9318
Critical
9344
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11712
Critical
11713
Critical
11714
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="https://twitter.com/_L4ys">Shih-Fong Peng (@_L4ys)</a> of <a href="https://www.teamt5.org/ ">TeamT5 </a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows User Profile Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete files or folders of their choosing.</p>
<p>The security update addresses the vulnerability by correcting how the Windows User Profile Service handles symlinks.</p>
Windows Shell
Microsoft
CVE-2020-0730
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11497
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11498
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11499
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11563
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11568
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11569
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11570
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11571
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11572
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11453
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11454
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11583
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11644
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11645
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11646
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11647
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10729
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10735
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10852
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10853
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10816
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10855
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10047
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10048
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10481
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10482
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10484
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
9312
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10287
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
9318
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
9344
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10051
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10049
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10378
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10379
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10483
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
10543
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11712
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11713
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11714
6.3
5.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Zhiniang Peng (<a href="https://twitter.com/edwardzpeng">@edwardzpeng</a>) of Qihoo 360 Core security and Fangming Gu (<a href="https://twitter.com/afang5472">@afang5472</a>)
Wenxu Wu <a href="https://twitter.com/ma7h1as">(@ma7h1as)</a> of <a href="http://xlab.tencent.com">Tencent Security Xuanwu Lab</a>
<a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> of Qihoo 360 Core security and <a href="https://twitter.com/afang5472">Fangming Gu</a>
Jonas Lykkegård
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how Windows Malicious Software Removal Tool (MSRT) handles junctions.</p>
Microsoft Malware Protection Engine
Microsoft
CVE-2020-0733
11738
11737
Elevation of Privilege
11738
Elevation of Privilege
11737
Important
11738
Important
11737
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
891716
https://www.microsoft.com/en-us/download/details.aspx?id=16
11738
No
Security Update
891716
https://www.microsoft.com/en-us/download/details.aspx?id=9905
11737
No
Security Update
Wenxu Wu <a href="https://twitter.com/ma7h1as">(@ma7h1as)</a> of <a href="http://xlab.tencent.com">Tencent Security Xuanwu Lab</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Remote Desktop Client Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would need to have control of a server and then convince a user to connect to it. An attacker would have no way of forcing a user to connect to the malicious server, they would need to trick the user into connecting via social engineering, DNS poisoning or using a Man in the Middle (MITM) technique. An attacker could also compromise a legitimate server, host malicious code on it, and wait for the user to connect.</p>
<p>The update addresses the vulnerability by correcting how the Windows Remote Desktop Client handles connection requests.</p>
Remote Desktop Client
Microsoft
CVE-2020-0734
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11712
Critical
11713
Critical
11714
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="http://c00c.cc/" >ZhangSen</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Search Indexer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Search Indexer properly handles objects in memory.</p>
Microsoft Windows Search Component
Microsoft
CVE-2020-0735
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Shefang Zhong of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Kernel
Microsoft
CVE-2020-0736
10047
10048
9312
10287
9318
9344
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
Keqi Hu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the tapisrv.dll properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0737
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Clément Rouault <a href="https://twitter.com/hakril">@hakril</a> from <a href="https://exatrack.com/">Exatrack</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Media Foundation Memory Corruption Vulnerability
<p>A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage.</p>
<p>The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.</p>
Windows Media
Microsoft
CVE-2020-0738
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11712
Critical
11713
Critical
11714
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Discovered by Marcin 'Icewall' Noga of <a href="https://talosintelligence.com/vulnerability_reports">Cisco Talos</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the dssvc.dll properly handles this type of functionality.</p>
Microsoft Windows
Microsoft
CVE-2020-0739
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
Jonas Lykkegård
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0740
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
Anonymous researcher
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0741
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0742
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0743
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Graphics Component Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p>
<p>The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0745
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Guopengfei from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Graphics Components Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information that could be useful for further exploitation.</p>
<p>To exploit the vulnerability, a user would have to open a specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0746
11497
11498
11499
11563
11568
11569
11570
11571
11572
11644
11645
11646
11647
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
<a href="https://twitter.com/flame36987044">liuxiaoliang</a> and <a href="http://weibo.com/jfpan">pjf</a> of IceSword Lab , Qihoo 360</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Data Sharing Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p>
<p>The update addresses the vulnerability by correcting the way the Windows Data Sharing Service handles file operations.</p>
Microsoft Windows
Microsoft
CVE-2020-0747
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
<a href="nmarkus@paloaltonetworks.com">Nadav Markus</a> and <a href="ysamuel@paloaltonetworks.com">Yaron Samuel</a> of Palo Alto Networks
Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-20T08:00:00
<p>Updated acknowledgment.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0748
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Windows COM
Microsoft
CVE-2020-0749
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Connected Devices Platform Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Connected Devices Platform Service properly handles objects in memory.</p>
Windows COM
Microsoft
CVE-2020-0750
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
Anonymous researcher
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.</p>
Windows Hyper-V
Microsoft
CVE-2020-0751
11645
11647
11713
11715
Denial of Service
11645
Denial of Service
11647
Denial of Service
11713
Denial of Service
11715
Important
11645
Important
11647
Important
11713
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11713
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11715
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11645
11647
11713
11715
Yes
Security Update
<a href="https://twitter.com/ergot86">Daniel Fernandez Kuehr</a> of Blue Frost Security GmbH
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Search Indexer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the Windows Search Indexer properly handles objects in memory.</p>
Windows COM
Microsoft
CVE-2020-0752
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Shefang Zhong of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Error Reporting Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.</p>
<p>An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting the way that WER handles and executes files.</p>
Microsoft Windows
Microsoft
CVE-2020-0753
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="https://twitter.com/padovah4ck">Christian Danieli</a> and Anonymous
<a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> of Qihoo 360 Core security ,<a href="https://twitter.com/afang5472">Fangming Gu</a> & Xuefeng Li
Clément Labro (<a href="https://twitter.com/itm4n">@itm4n</a>)
<a href="https://twitter.com/fritzboger">Søren Fritzbøger</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-20T08:00:00
<p>Updated acknowledgment.</p>
Windows Error Reporting Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.</p>
<p>An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting the way that WER handles and executes files.</p>
Microsoft Windows
Microsoft
CVE-2020-0754
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="https://twitter.com/clavoillotte">Clément Lavoillotte @clavoillotte</a> of <a href="https://almond.consulting/">Almond</a>
Yongil Lee of <a href="https://www.diffense.com">Diffense</a>
<a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> of Qihoo 360 Core security and <a href="https://twitter.com/afang5472">Fangming Gu</a>
Gal De Leon of Palo Alto Networks
Jarvis_1oop of Pinduoduo Security Research Lab
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0755
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Key Isolation Service Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0756
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows SSH Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Secure Socket Shell handles remote commands.</p>
Microsoft Windows
Microsoft
CVE-2020-0757
11713
11570
11645
11646
11644
11568
11572
11569
11571
11647
11712
11714
11715
Elevation of Privilege
11713
Elevation of Privilege
11570
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11644
Elevation of Privilege
11568
Elevation of Privilege
11572
Elevation of Privilege
11569
Elevation of Privilege
11571
Elevation of Privilege
11647
Elevation of Privilege
11712
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11713
Important
11570
Important
11645
Important
11646
Important
11644
Important
11568
Important
11572
Important
11569
Important
11571
Important
11647
Important
11712
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11713
11645
11646
11644
11647
11712
11714
11715
Yes
Security Update
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11570
11568
11572
11569
11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11570
11568
11572
11569
11571
<a href="https://blog.mirch.io">Rich Mirch</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Excel. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Excel handles objects in memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
Microsoft
CVE-2020-0759
11573
11574
11575
11577
11578
10739
10740
10734
10489
10490
10656
10654
10655
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11577
Remote Code Execution
11578
Remote Code Execution
10739
Remote Code Execution
10740
Remote Code Execution
10734
Remote Code Execution
10489
Remote Code Execution
10490
Remote Code Execution
10656
Remote Code Execution
10654
Remote Code Execution
10655
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10739
Important
10740
Important
10734
Important
10489
Important
10490
Important
10656
Important
10654
Important
10655
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
No
Security Update
https://aka.ms/OfficeSecurityReleases
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
10734
No
Security Update
Click to Run
11577
11578
No
Security Update
4484256
https://www.microsoft.com/download/details.aspx?familyid=46034f0e-5914-4cc9-ab2a-472250c6a108
4484179
10739
Maybe
Security Update
4484256
https://www.microsoft.com/download/details.aspx?familyid=dc061ab9-42e0-4e25-abdf-31fae22072bb
4484179
10740
Maybe
Security Update
4484267
https://www.microsoft.com/download/details.aspx?familyid=824cc278-8686-4a98-be1d-761523377013
4484196
10489
Maybe
Security Update
4484267
https://www.microsoft.com/download/details.aspx?familyid=96b84350-afa0-41b4-ab0b-1838a3c9c6c1
4484196
10490
Maybe
Security Update
4484265
4484234
10656
Maybe
Security Update
4484265
https://www.microsoft.com/download/details.aspx?familyid=6d72acf7-b3bd-4237-bb5f-cbbd2aba6bdc
4484234
10654
Maybe
Security Update
4484265
https://www.microsoft.com/download/details.aspx?familyid=ad939ddc-3331-44a6-973c-71cda69b5811
4484234
10655
Maybe
Security Update
Marcin 'Icewall' Noga of <a href="https://talosintelligence.com/vulnerability_reports">Cisco Talos</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Graphics Component Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p>
<p>The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0792
11712
11713
11714
11715
11644
11645
11646
11647
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
11712
Important
11713
Important
11714
Important
11715
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
anch0vy@theori, kkokkokye@theori working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
Jaeseung Choi, Kangsu Kim and Sang Kil Cha (advisor) of <a href="https://softsec.kaist.ac.kr">SoftSec </a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-13T08:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
Windows Common Log File System Driver Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File System (CLFS)</a> driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p>
<p>The security update addresses the vulnerability by correcting how CLFS handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0657
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Common Log File System Driver Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p>
<p>The security update addresses the vulnerability by correcting how CLFS handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Microsoft Windows
Microsoft
CVE-2020-0658
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Data Sharing Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p>
<p>The update addresses the vulnerability by correcting the way the Windows Data Sharing Service handles file operations.</p>
Microsoft Windows
Microsoft
CVE-2020-0659
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
k0shl of Qihoo 360 Vulcan team
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
<p><strong>I applied the workaround to restrict access to JScript.dll as described in ADV200001. Do I need to undo the workaround before I apply the February security update?</strong></p>
<p>Yes. Customers who applied the workaround need to undo it before applying the updates to address this vulnerability.</p>
<p><strong>How do I undo the workaround?</strong></p>
<p>See "How to undo the workaround" in the Workaround section of this Security Vulnerability.</p>
Internet Explorer
Microsoft
CVE-2020-0674
10555-10378
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11712
10486-11713
10486-11714
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
10336-9318
10336-9312
Remote Code Execution
10555-10378
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11712
Remote Code Execution
10486-11713
Remote Code Execution
10486-11714
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Remote Code Execution
10336-9318
Remote Code Execution
10336-9312
Moderate
10555-10378
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11712
Critical
10486-11713
Critical
10486-11714
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Moderate
10486-10483
Moderate
10336-9318
Moderate
10336-9312
Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected;DOS:N/A
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10555-10378
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11497
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11498
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11563
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11568
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11569
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11570
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11571
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11712
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11713
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11714
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11453
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11454
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11583
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11644
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11645
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-11646
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10729
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10735
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10852
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10853
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10816
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10047
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10048
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10481
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10482
7.5
7.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10484
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10051
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10378
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10486-10483
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10336-9318
6.4
5.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10336-9312
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10555-10378
10486-10378
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10555-10378
10486-10378
4537767
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537767
4534251
10555-10378
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
10336-9318
10336-9312
Yes
IE Cumulative
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10486-11497
10486-11498
10486-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10486-11497
10486-11498
10486-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10486-11568
10486-11569
10486-11570
10486-11571
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10486-11712
10486-11713
10486-11714
10486-11644
10486-11645
10486-11646
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10486-11453
10486-11454
10486-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10486-11453
10486-11454
10486-11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10486-10729
10486-10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10486-10729
10486-10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10486-10852
10486-10853
10486-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10486-10852
10486-10853
10486-10816
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4537767
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537767
4534251
10486-10047
Yes
IE Cumulative
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10486-10481
10486-10482
10486-10483
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
4537821
4534297
10486-10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
10336-9318
10336-9312
Yes
Monthly Rollup
<p>By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016 and Windows Server 2019 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248">Enhanced Security Configuration</a>. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Impact of Workaround</strong></p>
<p><strong>Please note:</strong> Implementing these steps might result in reduced functionality for components or features that rely on jscript.dll. For example, depending on the environment, this could include client configurations that leverage proxy automatic configuration scripts (PAC scripts). These features and others may be impacted.</p>
<p>Microsoft recommends these mitigation steps only if there is indication that you are under elevated risk. If you implement the workaround, you will need to revert the mitigation steps before installing any future updates to continue to be protected.</p>
<p>By default, IE11, IE10, and IE9 uses Jscript9.dll which is not impacted by this vulnerability. This vulnerability only affects certain websites that utilize jscript as the scripting engine.</p>
<p><strong>Restrict access to JScript.dll</strong></p>
<p>For 32-bit systems, enter the following command at an administrative command prompt:</p>
<pre><code> takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
</code></pre>
<p>For 64-bit systems, enter the following command at an administrative command prompt:</p>
<pre><code> takeown /f %windir%\syswow64\jscript.dll
cacls %windir%\syswow64\jscript.dll /E /P everyone:N
takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
</code></pre>
<p><strong>How to undo the workaround</strong></p>
<p>For 32-bit systems, enter the following command at an administrative command prompt:</p>
<pre><code> cacls %windir%\system32\jscript.dll /E /R everyone
</code></pre>
<p>For 64-bit systems, enter the following command at an administrative command prompt:</p>
<pre><code> cacls %windir%\system32\jscript.dll /E /R everyone
cacls %windir%\syswow64\jscript.dll /E /R everyone
</code></pre>
Yi Huang(@C0rk1_H) & Kang Yang(@dnpushme) of Qihoo 360 ATA
Clément Lecigne of Google’s Threat Analysis Group
1.1
2020-02-11T08:00:00
<p>Added FAQ to explain that if customers applied the workaround to restrict access to JScript.dll, it must be undone before installing the updates for this vulnerability. This is an informational change only.</p>
1.2
2020-02-12T08:00:00
<p>Added the applicable mitigation and workaround to provide consistency with ADV200001, which CVE-2020-9674 addresses. Customers should only apply the workaround if they are unable to install the February security updates. This is an informational change only.</p>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Secure Boot Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability can bypass secure boot and load untrusted software.</p>
<p>To exploit the vulnerability, an attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by blocking vulnerable third-party bootloaders.</p>
<p>For further information see <a href="https://support.microsoft.com/en-us/help/4535680">Security update for Secure Boot DBX: January 12, 2021</a>.</p>
<p><strong>Why are there different security update packages for this CVE?</strong></p>
<p>These are standalone security updates. These packages must be installed in addition to the normal security updates to be protected from this vulnerability.</p>
<p><strong>Are there any prerequisites to these security updates?</strong></p>
<p>These security updates have a Servicing Stack Update prerequisite for specific KB numbers. The packages have a built in pre-requisite logic to ensure the ordering.</p>
<p>Customer should ensure that they have the following Servicing Stack Update installed before installing these standalone security updates:</p>
<table>
<thead>
<tr>
<th>Product</th>
<th>SSU Package</th>
<th>Date Released</th>
</tr>
</thead>
<tbody>
<tr>
<td>Windows Server 2012</td>
<td>4566426</td>
<td>July 2020</td>
</tr>
<tr>
<td>Windows 8.1/Server 2012 R2</td>
<td>4524445</td>
<td>July 2020</td>
</tr>
<tr>
<td>Windows 10</td>
<td>4565911</td>
<td>July 2020</td>
</tr>
<tr>
<td>Windows 10 Version 1607/Server 2016</td>
<td>4576750</td>
<td>September 2020</td>
</tr>
<tr>
<td>Windows 10 1803/Windows Server, version 1803</td>
<td>4580398</td>
<td>October 2020</td>
</tr>
<tr>
<td>Windows 10 1809/Server 2019</td>
<td>4598480</td>
<td>January 2021</td>
</tr>
<tr>
<td>Windows 10 1909/Windows Server, version 1909</td>
<td>4598479</td>
<td>January 2021</td>
</tr>
</tbody>
</table>
<p><strong>If I need to manually install these standalone updates, a Servicing Stack Update, and a January 2021 Security Update, in what order should they be installed?</strong></p>
<p>Customers who need to manually install these three updates should install them in the following order:</p>
<ul>
<li>Servicing Stack Update</li>
<li>Standalone Secure Boot Update listed in this CVE</li>
<li>January 2021 Security Update</li>
</ul>
<p>Customers whose systems are configured to receive automatic updates will automatically receive these updates in the correct order.</p>
<p><strong>Is there anything else that I should know about these updates?</strong></p>
<p>If Windows Defender Credential Guard (Virtual Secure Mode) is enabled, two additional reboots will be required.</p>
<p><strong>Why have the x86 and ARM64 versions of Windows been removed from the Security Updates table?</strong></p>
<p>The x86 and ARM64 versions of Windows have been removed because these architectures are not affected by this vulnerability.</p>
Windows Secure Boot
Microsoft
CVE-2020-0689
11498
11499
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
11713
11715
Security Feature Bypass
11498
Security Feature Bypass
11499
Security Feature Bypass
11569
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
10735
Security Feature Bypass
10853
Security Feature Bypass
10816
Security Feature Bypass
10855
Security Feature Bypass
10482
Security Feature Bypass
10378
Security Feature Bypass
10379
Security Feature Bypass
10483
Security Feature Bypass
10543
Security Feature Bypass
11713
Security Feature Bypass
11715
Important
11498
Important
11499
Important
11569
Important
11571
Important
11572
Important
10735
Important
10853
Important
10816
Important
10855
Important
10482
Important
10378
Important
10379
Important
10483
Important
10543
Important
11713
Important
11715
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11498
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11499
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11569
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11571
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11572
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10735
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10853
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10816
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10855
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10482
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10378
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10379
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10483
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
10543
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11713
8.2
7.6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
11715
4535680
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4535680
11498
11499
11713
11715
Yes
Security Update
4535680
https://support.microsoft.com/help/4535680
11498
11499
11713
11715
5012170
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012170
4535680
11569
11571
11572
Maybe
Security Update
10.0.17763.3284
5012170
https://support.microsoft.com/help/5012170
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
5012170
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012170
4535680
10735
Maybe
Security Update
1.002
5012170
https://support.microsoft.com/help/5012170
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
5012170
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012170
4535680
10853
10816
10855
Maybe
Security Update
10.0.14393.5285
5012170
https://support.microsoft.com/help/5012170
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
5012170
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012170
4535680
10482
10483
10543
Maybe
Security Update
V1.003
5012170
https://support.microsoft.com/help/5012170
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
5012170
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012170
4535680
10378
10379
Maybe
Security Update
V1.002
5012170
https://support.microsoft.com/help/5012170
11569
11571
11572
10735
10853
10816
10855
10482
10378
10379
10483
10543
1.1
2020-02-12T08:00:00
<p>Updated the FAQ to include order of installation for Servicing Stack, standalone updates for this vulnerability, and February Security updates. This is an informational change only.</p>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
2.0
2021-01-12T08:00:00
<p>To comprehensively address CVE-2020-0689, Microsoft has released Security Update 4535680 for all affected versions of Windows 10; Windows 8.1 and Server 2012 R2, and Windows Server 2012. In addition, the following revisions have been made: 1) Updated Servicing Stack Updates (SSU) to reflect the most recent SSU for affected Windows versions. 2) Removed all 32-bit and ARM64-based versions of Windows from the Security Updates table as these architectures are not affected by the vulnerability. 3) Removed versions of Windows that are no longer in support from the Security Updates table as there is no update available for them.</p>
3.0
2022-11-15T08:00:00
<p>In the Security Updates table, updated the Download and Article links to provide links to standalone security update KB5012170 for Secure Boot. This update supersedes previous updates KB4535680 and KB4524244, which have been expired as of November 2022. Microsoft recommends that customers install KB5012170 to be fully protected from this vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. Please note that KB5012170 is not available for Windows 10 version 1803 and Windows 10 version 1909 as these versions are no longer in support. For more information see <a href="https://support.microsoft.com/help/5012170">KB5012170</a>.</p>
Microsoft Exchange Server Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other users.</p>
<p>Exploitation of this vulnerability requires Exchange Web Services (EWS) to be enabled and in use in an affected environment. To exploit the vulnerability, an attacker would need to change parameters in the Security Access Token and forward it to a Microsoft Exchange Server, thereby allowing impersonation of another Exchange user.</p>
<p>To address this vulnerability, Microsoft has changed the way EWS handles these tokens.</p>
Microsoft Exchange Server
Microsoft
CVE-2020-0692
11682
11704
11705
11731
11732
Elevation of Privilege
11682
Elevation of Privilege
11704
Elevation of Privilege
11705
Elevation of Privilege
11731
Elevation of Privilege
11732
Important
11682
Important
11704
Important
11705
Important
11731
Important
11732
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4536988
https://www.microsoft.com/download/details.aspx?familyid=ddba43d0-f66d-410d-a421-bb26e45d64b7
4523171
11682
Maybe
Security Update
4536988
https://support.microsoft.com/help/4536988
11682
4536987
https://www.microsoft.com/download/details.aspx?familyid=dec0d147-8b43-4fee-94cb-ed43ed1226ad
4523171
11704
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11731
11732
4536987
https://www.microsoft.com/download/details.aspx?familyid=5ae7346b-f59c-415d-b576-e50f6b493a23
4523171
11705
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11731
11732
4536987
https://www.microsoft.com/download/details.aspx?familyid=6f5e2305-f1dc-4ce9-97c5-4d6fc1b87a24
4523171
11731
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11731
11732
4536987
https://www.microsoft.com/download/details.aspx?familyid=a4bd9a4e-56f4-42c2-b0d7-fffe52c5dbe5
4523171
11732
Maybe
Security Update
4536987
https://support.microsoft.com/help/4536987
11704
11705
11731
11732
Anonymous
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The update addresses the vulnerability by correcting how the Telephony Service handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0698
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Clément Rouault <a href="https://twitter.com/hakril">@hakril</a> from <a href="https://exatrack.com/">Exatrack</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Backup Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.</p>
Microsoft Windows
Microsoft
CVE-2020-0703
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10051
10049
10378
10379
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10051
Important
10049
Important
10378
Important
10379
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Edward Torkington of NCC Group <a>https://www.nccgroup.trust/</a>
Yongil Lee of Diffense
zhong_sf of <a href="https://www.360.com/">Qihoo 360 Vulcan Team</a>
Zak Rogness
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-02-18T08:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
Windows Wireless Network Manager Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Wireless Network Manager handles memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0704
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to disclose uninitialized kernel memory.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Network Driver Interface Specification (NDIS) handles memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows NDIS
Microsoft
CVE-2020-0705
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="https://twitter.com/Bl1nnnk" /a>JunGu and <a href="https://twitter.com/YHZX_2013" /a>ZiMi of Alibaba Orion Security Lab
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Microsoft Browser Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests. An attacker who successfully exploited this vulnerability could determine the origin of all of the web pages in the affected browser.</p>
<p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. Additionally, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could be used to exploit the vulnerability. However, in all cases an attacker would have no way to force users to view attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p>
<p>The security update addresses the vulnerability by correcting how affected browsers handle cross-origin resources.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p>
Microsoft Edge (HTML-based)
Microsoft
CVE-2020-0706
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
10555-10378
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10481
10486-10482
10486-10484
10486-10378
10486-10483
10486-11712
10486-11713
10486-11714
Information Disclosure
10724-11497
Information Disclosure
10724-11498
Information Disclosure
10724-11563
Information Disclosure
10724-11568
Information Disclosure
10724-11569
Information Disclosure
10724-11570
Information Disclosure
10724-11571
Information Disclosure
10724-11644
Information Disclosure
10724-11645
Information Disclosure
10724-11646
Information Disclosure
10724-11712
Information Disclosure
10724-11713
Information Disclosure
10724-11714
Information Disclosure
10555-10378
Information Disclosure
10486-11497
Information Disclosure
10486-11498
Information Disclosure
10486-11563
Information Disclosure
10486-11568
Information Disclosure
10486-11569
Information Disclosure
10486-11570
Information Disclosure
10486-11571
Information Disclosure
10486-11453
Information Disclosure
10486-11454
Information Disclosure
10486-11583
Information Disclosure
10486-11644
Information Disclosure
10486-11645
Information Disclosure
10486-11646
Information Disclosure
10486-10729
Information Disclosure
10486-10735
Information Disclosure
10486-10852
Information Disclosure
10486-10853
Information Disclosure
10486-10816
Information Disclosure
10486-10481
Information Disclosure
10486-10482
Information Disclosure
10486-10484
Information Disclosure
10486-10378
Information Disclosure
10486-10483
Information Disclosure
10486-11712
Information Disclosure
10486-11713
Information Disclosure
10486-11714
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11644
Important
10724-11645
Important
10724-11646
Important
10724-11712
Important
10724-11713
Important
10724-11714
Low
10555-10378
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-11644
Important
10486-11645
Important
10486-11646
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10378
Low
10486-10483
Important
10486-11712
Important
10486-11713
Important
10486-11714
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11570
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11644
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11645
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11646
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11712
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11713
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11714
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10555-10378
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11570
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11583
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11644
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11645
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11646
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10729
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10735
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10852
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10853
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10816
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10481
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10482
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10484
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10378
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10483
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11712
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11713
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11714
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
10724-11644
10724-11645
10724-11646
10724-11712
10724-11713
10724-11714
10486-11644
10486-11645
10486-11646
10486-11712
10486-11713
10486-11714
Yes
Security Update
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10555-10378
10486-10378
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10555-10378
10486-10378
4537767
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537767
4534251
10555-10378
10486-10481
10486-10482
10486-10378
10486-10483
Yes
IE Cumulative
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
10486-11453
10486-11454
10486-11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
10486-11453
10486-11454
10486-11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10486-10729
10486-10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10486-10729
10486-10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10486-10852
10486-10853
10486-10816
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10486-10852
10486-10853
10486-10816
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10486-10481
10486-10482
10486-10483
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
4537821
4534297
10486-10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10486-10481
10486-10482
10486-10484
10486-10483
James Lee <a href="https://twitter.com/Windowsrcer"/>@Windowsrcer</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows IME Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how the Windows IME handles memory.</p>
Windows Shell
Microsoft
CVE-2020-0707
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Shefang Zhong of <a href="https://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Imaging Library Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to coerce a victim to open a specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Imaging Library handles memory.</p>
Windows Update Stack
Microsoft
CVE-2020-0708
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Wayne Low of Fortinet’s <a href=https://fortiguard.com/>FortiGuard Labs</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
DirectX Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how DirectX handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0709
10729
10735
10852
10853
10816
10855
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
<a href="https://twitter.com/flame36987044">liuxiaoliang</a> and <a href="http://weibo.com/jfpan">pjf</a> of IceSword Lab , Qihoo 360</a>
1.1
2020-02-12T08:00:00
<p>Updated acknowledgment. This is an informational change only.</p>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
DirectX Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The update addresses the vulnerability by correcting how DirectX handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0714
11497
11498
11499
11563
11568
11569
11570
11571
11572
11644
11645
11646
11647
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
<a href="https://twitter.com/flame36987044">liuxiaoliang</a> and <a href="http://weibo.com/jfpan">pjf</a> of IceSword Lab , Qihoo 360</a>
1.1
2020-02-12T08:00:00
<p>Updated acknowledgment. This is an informational change only.</p>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Graphics Component Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p>
<p>The update addresses the vulnerability by correcting the way in which the Microsoft Graphics Component handles objects in memory and preventing unintended elevation from user mode.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0715
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Guopengfei from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows Kernel
Microsoft
CVE-2020-0716
11453
11454
11583
10729
10735
10852
10853
10816
10855
10481
10482
10484
10483
10543
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
10483
Information Disclosure
10543
Important
11453
Important
11454
Important
11583
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
Guopengfei from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows Kernel
Microsoft
CVE-2020-0717
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
Guopengfei from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0719
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0720
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0721
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0722
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0723
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0724
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0725
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0726
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Gil Dabah
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2020-0731
11497
11498
11499
11563
11568
11569
11570
11571
11572
11712
11713
11714
11715
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11712
Important
11713
Important
11714
Important
11715
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11712
11713
11714
11715
11644
11645
11646
11647
Yes
Security Update
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Marcin Towalski of <a href="https://talosintelligence.com/vulnerability_reports">Cisco Talos</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
DirectX Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how DirectX handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0732
10729
10735
10852
10853
10816
10855
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
<a href="https://twitter.com/flame36987044">liuxiaoliang</a> and <a href="http://weibo.com/jfpan">pjf</a> of IceSword Lab , Qihoo 360</a>
1.1
2020-02-12T08:00:00
<p>Updated acknowledgment. This is an informational change only.</p>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how GDI handles memory addresses.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2020-0744
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9318
9344
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537820
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537820
4534310
10047
10048
10051
10049
Yes
Monthly Rollup
4537813
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537813
10047
10048
10051
10049
Yes
Security Only
4537813
https://support.microsoft.com/help/4537813
10047
10048
10051
10049
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537810
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537810
4534303
9312
10287
9318
9344
Yes
Monthly Rollup
4537822
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537822
9312
10287
9318
9344
Yes
Security Only
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
Simon Barsky @expend20
Wenguang Jiao of Qihoo 360 CoreSecurity
xina1i of <a href"https://github.com/xinali"> Anity Lab </a>
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
Hardik Shah (<a href="https://twitter.com/hardik05">@hardik05</a>) of McAfee
<a href="https://twitter.com/klotxl404">Ke Liu</a> of <a href="https://xlab.tencent.com/en/">Tencent Security Xuanwu Lab</a>
Symeon Paraschoudis of <a href="https://www.pentestpartners.com">Pen Test Partners LLP</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
1.1
2020-04-01T07:00:00
<p>Added an acknowledgement. This is an informational change only.</p>
1.2
2020-04-23T07:00:00
<p>Added acknowledgements. This is an informational change only.</p>
February 2020 Adobe Flash Security Update
<p>This security update addresses the following vulnerability, which is described in Adobe Security Bulletin APSB20-06: CVE-2020-3757.</p>
<p>Please note that in the event of any discrepancies. the definitive source of information (for example, vulnerability severity and impact) is the Adobe Flash bulletin as referenced.</p>
Adobe Flash Player
Microsoft
ADV200003
10384-11497
10384-11498
10384-11563
10384-11568
10384-11569
10384-11570
10384-11571
10384-11453
10384-11454
10384-11583
10384-11644
10384-11645
10384-11646
10384-10729
10384-10735
10384-10852
10384-10853
10384-10816
10384-10481
10384-10482
10384-10484
10384-10378
10384-10483
10384-11712
10384-11714
10384-11713
Elevation of Privilege
10384-11497
Elevation of Privilege
10384-11498
Elevation of Privilege
10384-11563
Elevation of Privilege
10384-11568
Elevation of Privilege
10384-11569
Elevation of Privilege
10384-11570
Elevation of Privilege
10384-11571
Elevation of Privilege
10384-11453
Elevation of Privilege
10384-11454
Elevation of Privilege
10384-11583
Elevation of Privilege
10384-11644
Elevation of Privilege
10384-11645
Elevation of Privilege
10384-11646
Elevation of Privilege
10384-10729
Elevation of Privilege
10384-10735
Elevation of Privilege
10384-10852
Elevation of Privilege
10384-10853
Elevation of Privilege
10384-10816
Elevation of Privilege
10384-10481
Elevation of Privilege
10384-10482
Elevation of Privilege
10384-10484
Elevation of Privilege
10384-10378
Elevation of Privilege
10384-10483
Elevation of Privilege
10384-11712
Elevation of Privilege
10384-11714
Elevation of Privilege
10384-11713
Important
10384-11497
Important
10384-11498
Important
10384-11563
Important
10384-11568
Important
10384-11569
Important
10384-11570
Important
10384-11571
Important
10384-11453
Important
10384-11454
Important
10384-11583
Important
10384-11644
Important
10384-11645
Important
10384-11646
Important
10384-10729
Important
10384-10735
Important
10384-10852
Important
10384-10853
Important
10384-10816
Important
10384-10481
Important
10384-10482
Important
10384-10484
Important
10384-10378
Important
10384-10483
Important
10384-11712
Important
10384-11714
Important
10384-11713
Publicly Disclosed:No;Exploited:No;DOS:N/A
4537759
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537759
4520024
10384-11497
10384-11498
10384-11563
10384-11568
10384-11569
10384-11570
10384-11571
10384-11453
10384-11454
10384-11583
10384-11644
10384-11645
10384-11646
10384-10729
10384-10735
10384-10852
10384-10853
10384-10816
10384-10481
10384-10482
10384-10484
10384-10378
10384-10483
10384-11712
10384-11714
10384-11713
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p>
<ul>
<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>
<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>
<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>
</ul>
<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>
<p><strong>Prevent Adobe Flash Player from running</strong>
You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>
<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To set the kill bit for the control in the registry, perform the following steps:</p>
<ol>
<li><p>Paste the following into a text file and save it with the .reg file extension.</p>
<pre><code> Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
</li>
<li><p>Double-click the .reg file to apply it to an individual system.</p>
<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>
</li>
</ol>
<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.
<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.
<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>
<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>
<p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a>
<a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a>
<a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p>
<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:
<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>
<ol>
<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>
<li>Navigate to the following node:
<strong>Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management</strong></li>
<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>
<li>Change the setting to Enabled.</li>
<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>
<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.
<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>
<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.
<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>
</ol>
<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>
<ol>
<li>Create a text file named Disable_Flash.reg with the following contents:</li>
</ol>
<pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
<ol start="2">
<li>Double-click the .reg file to apply it to an individual system.</li>
<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>.
<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>
</ol>
<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.
<strong>How to undo the workaround</strong>.</li>
</ol>
<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones</strong>
You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>
</ol>
<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>
<ol>
<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>
<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>Local intranet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.
<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.
<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.
<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>
</ol>
<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>
<li>Click the <strong>Security</strong> tab.</li>
<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.
<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.
<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>
After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>
</ol>
<p>To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>
<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>
<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>
<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>
<li>Repeat these steps for each site that you want to add to the zone.</li>
<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.
<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>
</ol>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Remote Desktop Client Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this vulnerability could execute arbitrary code on the computer of the connecting client. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would need to have control of a server and then convince a user to connect to it. An attacker would have no way of forcing a user to connect to the malicious server, they would need to trick the user into connecting via social engineering, DNS poisoning or using a Man in the Middle (MITM) technique. An attacker could also compromise a legitimate server, host malicious code on it, and wait for the user to connect.</p>
<p>The update addresses the vulnerability by correcting how the Windows Remote Desktop Client handles connection requests.</p>
Remote Desktop Client
Microsoft
CVE-2020-0817
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
11712
11713
11714
11715
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11712
Remote Code Execution
11713
Remote Code Execution
11714
Remote Code Execution
11715
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10481
Critical
10482
Critical
10484
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11712
Critical
11713
Critical
11714
Critical
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537814
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537814
4534283
10378
10379
Yes
Monthly Rollup
4537814
https://support.microsoft.com/help/4537814
10378
10379
4537794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537794
10378
10379
Yes
Security Only
4537794
https://support.microsoft.com/help/4537794
10378
10379
<a href="http://c00c.cc/" >ZhangSen</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the sysmain.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the sysmain.dll properly handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2020-0818
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10483
10543
11712
11713
11714
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11714
Elevation of Privilege
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
4537762
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537762
4534293
11497
11498
11499
11563
Yes
Security Update
4537762
https://support.microsoft.com/help/4537762
11497
11498
11499
11563
4532691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532691
4534273
11568
11569
11570
11571
11572
Yes
Security Update
4532691
https://support.microsoft.com/help/4532691
11568
11569
11570
11571
11572
4537789
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537789
4534276
11453
11454
11583
Yes
Security Update
4537789
https://support.microsoft.com/help/4537789
11453
11454
11583
4532693
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4532693
4528760
11644
11645
11646
11647
11712
11713
11714
11715
Yes
Security Update
4537776
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537776
4534306
10729
10735
Yes
Security Update
4537776
https://support.microsoft.com/help/4537776
10729
10735
4537764
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537764
4534271
10852
10853
10816
10855
Yes
Security Update
4537764
https://support.microsoft.com/help/4537764
10852
10853
10816
10855
4537821
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537821
4534297
10481
10482
10483
10543
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
4537803
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4537803
10481
10482
10483
10543
Yes
Security Only
4537803
https://support.microsoft.com/help/4537803
10481
10482
10483
10543
4537821
4534297
10484
Yes
Monthly Rollup
4537821
https://support.microsoft.com/help/4537821
10481
10482
10484
10483
10543
<a href="https://www.pentestpartners.com/"> T Shiomitsu of Pen Test Partners</a>
1.0
2020-02-11T08:00:00
<p>Information published.</p>