# Vulnerabilities published in 2020


- [CVE-2020-1719](https://insights.sbomify.com/CVE-2020-1719/): Privilege Context Switching Error in wildlfy (medium 5.4)
- [CVE-2020-1718](https://insights.sbomify.com/CVE-2020-1718/): Improper Authentication for Keycloak (high 7.1)
- [CVE-2020-1717](https://insights.sbomify.com/CVE-2020-1717/): Generation of Error Message Containing Sensitive Information in Keycloak (low 2.7)
- [CVE-2020-17163](https://insights.sbomify.com/CVE-2020-17163/): Visual Studio Code Python Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17162](https://insights.sbomify.com/CVE-2020-17162/): Microsoft Windows Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2020-1716](https://insights.sbomify.com/CVE-2020-1716/): Hardcoded credentials in ceph-ansible (high 8.8)
- [CVE-2020-17159](https://insights.sbomify.com/CVE-2020-17159/): Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17158](https://insights.sbomify.com/CVE-2020-17158/): Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-17156](https://insights.sbomify.com/CVE-2020-17156/): Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17153](https://insights.sbomify.com/CVE-2020-17153/): Microsoft Edge for Android Spoofing Vulnerability (medium 4.3)
- [CVE-2020-17152](https://insights.sbomify.com/CVE-2020-17152/): Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-17150](https://insights.sbomify.com/CVE-2020-17150/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17148](https://insights.sbomify.com/CVE-2020-17148/): Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17147](https://insights.sbomify.com/CVE-2020-17147/): Dynamics CRM Webclient Cross-site Scripting Vulnerability (high 8.7)
- [CVE-2020-17145](https://insights.sbomify.com/CVE-2020-17145/): Azure DevOps Server and Team Foundation Services Spoofing Vulnerability (medium 5.4)
- [CVE-2020-17144](https://insights.sbomify.com/CVE-2020-17144/): Microsoft Exchange Server Remote Code Execution (high 8.4, exploited in the wild)
- [CVE-2020-17143](https://insights.sbomify.com/CVE-2020-17143/): Microsoft Exchange Server Information Disclosure Vulnerability (high 8.8)
- [CVE-2020-17142](https://insights.sbomify.com/CVE-2020-17142/): Microsoft Exchange Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2020-17141](https://insights.sbomify.com/CVE-2020-17141/): Microsoft Exchange Remote Code Execution Vulnerability (high 8.4)
- [CVE-2020-17140](https://insights.sbomify.com/CVE-2020-17140/): Windows SMB Information Disclosure Vulnerability (high 8.1)
- [CVE-2020-1714](https://insights.sbomify.com/CVE-2020-1714/): Improper Input Validation in Keycloak (high 7.5)
- [CVE-2020-17139](https://insights.sbomify.com/CVE-2020-17139/): Windows Overlay Filter Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2020-17138](https://insights.sbomify.com/CVE-2020-17138/): Windows Error Reporting Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17137](https://insights.sbomify.com/CVE-2020-17137/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17136](https://insights.sbomify.com/CVE-2020-17136/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17135](https://insights.sbomify.com/CVE-2020-17135/): Azure DevOps Server Spoofing Vulnerability (medium 6.4)
- [CVE-2020-17134](https://insights.sbomify.com/CVE-2020-17134/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17133](https://insights.sbomify.com/CVE-2020-17133/): Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-17132](https://insights.sbomify.com/CVE-2020-17132/): Microsoft Exchange Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2020-17131](https://insights.sbomify.com/CVE-2020-17131/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-17130](https://insights.sbomify.com/CVE-2020-17130/): Microsoft Excel Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2020-17129](https://insights.sbomify.com/CVE-2020-17129/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17128](https://insights.sbomify.com/CVE-2020-17128/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17127](https://insights.sbomify.com/CVE-2020-17127/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17126](https://insights.sbomify.com/CVE-2020-17126/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17125](https://insights.sbomify.com/CVE-2020-17125/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17124](https://insights.sbomify.com/CVE-2020-17124/): Microsoft PowerPoint Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17123](https://insights.sbomify.com/CVE-2020-17123/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17122](https://insights.sbomify.com/CVE-2020-17122/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17121](https://insights.sbomify.com/CVE-2020-17121/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-17120](https://insights.sbomify.com/CVE-2020-17120/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-1712](https://insights.sbomify.com/CVE-2020-1712/): Use after free in systemd (high 7.8)
- [CVE-2020-17119](https://insights.sbomify.com/CVE-2020-17119/): Microsoft Outlook Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-17118](https://insights.sbomify.com/CVE-2020-17118/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.1)
- [CVE-2020-17117](https://insights.sbomify.com/CVE-2020-17117/): Microsoft Exchange Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2020-17115](https://insights.sbomify.com/CVE-2020-17115/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0)
- [CVE-2020-17113](https://insights.sbomify.com/CVE-2020-17113/): Windows Camera Codec Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17110](https://insights.sbomify.com/CVE-2020-17110/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-1711](https://insights.sbomify.com/CVE-2020-1711/): Memory corruption in QEMU (high 7.7)
- [CVE-2020-17109](https://insights.sbomify.com/CVE-2020-17109/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17108](https://insights.sbomify.com/CVE-2020-17108/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17107](https://insights.sbomify.com/CVE-2020-17107/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17106](https://insights.sbomify.com/CVE-2020-17106/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17105](https://insights.sbomify.com/CVE-2020-17105/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17104](https://insights.sbomify.com/CVE-2020-17104/): Visual Studio Code JSHint Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17103](https://insights.sbomify.com/CVE-2020-17103/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-17102](https://insights.sbomify.com/CVE-2020-17102/): WebP Image Extensions Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17101](https://insights.sbomify.com/CVE-2020-17101/): HEIF Image Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17100](https://insights.sbomify.com/CVE-2020-17100/): Visual Studio Tampering Vulnerability (medium 5.5)
- [CVE-2020-1710](https://insights.sbomify.com/CVE-2020-1710/): Other in JBoss Enterprise Application Platform (medium 5.3)
- [CVE-2020-17099](https://insights.sbomify.com/CVE-2020-17099/): Windows Lock Screen Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2020-17098](https://insights.sbomify.com/CVE-2020-17098/): Windows GDI+ Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17097](https://insights.sbomify.com/CVE-2020-17097/): Windows Digital Media Receiver Elevation of Privilege Vulnerability (low 3.3)
- [CVE-2020-17096](https://insights.sbomify.com/CVE-2020-17096/): Windows NTFS Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-17095](https://insights.sbomify.com/CVE-2020-17095/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.5)
- [CVE-2020-17094](https://insights.sbomify.com/CVE-2020-17094/): Windows Error Reporting Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17092](https://insights.sbomify.com/CVE-2020-17092/): Windows Network Connections Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17091](https://insights.sbomify.com/CVE-2020-17091/): Microsoft Teams Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17090](https://insights.sbomify.com/CVE-2020-17090/): Microsoft Defender for Endpoint Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2020-1709](https://insights.sbomify.com/CVE-2020-1709/): Privilege escalation in openshift/mediawiki (high 7.0)
- [CVE-2020-17089](https://insights.sbomify.com/CVE-2020-17089/): Microsoft SharePoint Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2020-17088](https://insights.sbomify.com/CVE-2020-17088/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17087](https://insights.sbomify.com/CVE-2020-17087/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2020-17086](https://insights.sbomify.com/CVE-2020-17086/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17085](https://insights.sbomify.com/CVE-2020-17085/): Microsoft Exchange Server Denial of Service Vulnerability (medium 6.2)
- [CVE-2020-17084](https://insights.sbomify.com/CVE-2020-17084/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.5)
- [CVE-2020-17083](https://insights.sbomify.com/CVE-2020-17083/): Microsoft Exchange Server Remote Code Execution Vulnerability (medium 5.5)
- [CVE-2020-17082](https://insights.sbomify.com/CVE-2020-17082/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17081](https://insights.sbomify.com/CVE-2020-17081/): Microsoft Raw Image Extension Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-1708](https://insights.sbomify.com/CVE-2020-1708/): Privilege escalation in openshift/mysql-apb (high 7.0)
- [CVE-2020-17079](https://insights.sbomify.com/CVE-2020-17079/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17078](https://insights.sbomify.com/CVE-2020-17078/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17077](https://insights.sbomify.com/CVE-2020-17077/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17076](https://insights.sbomify.com/CVE-2020-17076/): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17075](https://insights.sbomify.com/CVE-2020-17075/): Windows USO Core Worker Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17074](https://insights.sbomify.com/CVE-2020-17074/): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17073](https://insights.sbomify.com/CVE-2020-17073/): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17071](https://insights.sbomify.com/CVE-2020-17071/): Windows Delivery Optimization Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17070](https://insights.sbomify.com/CVE-2020-17070/): Windows Update Medic Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1707](https://insights.sbomify.com/CVE-2020-1707/): Misconfiguration in openshift/postgresql-apb (high 7.0)
- [CVE-2020-17069](https://insights.sbomify.com/CVE-2020-17069/): Windows NDIS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17068](https://insights.sbomify.com/CVE-2020-17068/): Windows GDI+ Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17067](https://insights.sbomify.com/CVE-2020-17067/): Microsoft Excel Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2020-17066](https://insights.sbomify.com/CVE-2020-17066/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17065](https://insights.sbomify.com/CVE-2020-17065/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17064](https://insights.sbomify.com/CVE-2020-17064/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17063](https://insights.sbomify.com/CVE-2020-17063/): Microsoft Office Online Spoofing Vulnerability (medium 6.8)
- [CVE-2020-17062](https://insights.sbomify.com/CVE-2020-17062/): Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17061](https://insights.sbomify.com/CVE-2020-17061/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-17060](https://insights.sbomify.com/CVE-2020-17060/): Microsoft SharePoint Server Spoofing Vulnerability (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/146/
