Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2020-01-14 CVE-2020-0623 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-01-14 CVE-2020-0620 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-01-14 CVE-2020-0614 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-01-14 CVE-2020-0613 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-01-14 CVE-2020-0612 Unspecified vulnerability in Microsoft Windows Server 2016 and Windows Server 2019
A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability'.
network
low complexity
microsoft
7.5
2020-01-14 CVE-2020-0611 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.
network
high complexity
microsoft
7.5
2020-01-14 CVE-2020-0606 Improper Input Validation vulnerability in Microsoft .Net Core and .Net Framework
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-20
8.8
2020-01-14 CVE-2020-0605 Improper Input Validation vulnerability in Microsoft .Net Core and .Net Framework
A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-20
8.8
2020-01-14 CVE-2020-0603 Out-of-bounds Write vulnerability in multiple products
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.
network
low complexity
microsoft redhat CWE-787
8.8
2020-01-14 CVE-2020-0602 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
network
low complexity
microsoft redhat
7.5