Vulnerabilities > Microsoft > High

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-0855 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2020-03-12 CVE-2020-0854 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.1
2020-03-12 CVE-2020-0852 Unspecified vulnerability in Microsoft Office, Office Online Server and Sharepoint Server
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2020-03-12 CVE-2020-0851 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
local
low complexity
microsoft
7.8
2020-03-12 CVE-2020-0850 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
network
low complexity
microsoft
8.8
2020-03-12 CVE-2020-0849 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-03-12 CVE-2020-0848 Out-of-bounds Write vulnerability in Microsoft Chakracore
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
network
high complexity
microsoft CWE-787
7.5
2020-03-12 CVE-2020-0847 Unspecified vulnerability in Microsoft Internet Explorer 11/9
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.
network
high complexity
microsoft
7.5
2020-03-12 CVE-2020-0845 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8
2020-03-12 CVE-2020-0844 Unspecified vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.
local
low complexity
microsoft
7.8