# Vulnerabilities published in 2020


- [CVE-2020-1706](https://insights.sbomify.com/CVE-2020-1706/): Misconfiguration in openshift/apb-tools-container (high 7.0)
- [CVE-2020-17058](https://insights.sbomify.com/CVE-2020-17058/): Microsoft Browser Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-17057](https://insights.sbomify.com/CVE-2020-17057/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-17056](https://insights.sbomify.com/CVE-2020-17056/): Windows Network File System Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17055](https://insights.sbomify.com/CVE-2020-17055/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17054](https://insights.sbomify.com/CVE-2020-17054/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-17053](https://insights.sbomify.com/CVE-2020-17053/): Internet Explorer Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-17052](https://insights.sbomify.com/CVE-2020-17052/): Scripting Engine Memory Corruption Vulnerability (high 7.5)
- [CVE-2020-17051](https://insights.sbomify.com/CVE-2020-17051/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2020-1705](https://insights.sbomify.com/CVE-2020-1705/): Privilege escalation in openshift/template-service-broker-operator (high 7.0)
- [CVE-2020-17049](https://insights.sbomify.com/CVE-2020-17049/): Kerberos KDC Security Feature Bypass Vulnerability (medium 6.6)
- [CVE-2020-17048](https://insights.sbomify.com/CVE-2020-17048/): Chakra Scripting Engine Memory Corruption Vulnerability (medium 4.2)
- [CVE-2020-17047](https://insights.sbomify.com/CVE-2020-17047/): Windows Network File System Denial of Service Vulnerability (high 7.5)
- [CVE-2020-17046](https://insights.sbomify.com/CVE-2020-17046/): Windows Error Reporting Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-17045](https://insights.sbomify.com/CVE-2020-17045/): Windows KernelStream Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17044](https://insights.sbomify.com/CVE-2020-17044/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17043](https://insights.sbomify.com/CVE-2020-17043/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17042](https://insights.sbomify.com/CVE-2020-17042/): Windows Print Spooler Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-17041](https://insights.sbomify.com/CVE-2020-17041/): Windows Print Configuration Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17040](https://insights.sbomify.com/CVE-2020-17040/): Windows Hyper-V Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2020-1704](https://insights.sbomify.com/CVE-2020-1704/): Privilege escalation in openshift-service-mesh/kiali-rhel7-operator (high 7.0)
- [CVE-2020-17038](https://insights.sbomify.com/CVE-2020-17038/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17037](https://insights.sbomify.com/CVE-2020-17037/): Windows WalletService Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17036](https://insights.sbomify.com/CVE-2020-17036/): Windows Function Discovery SSDP Provider Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17035](https://insights.sbomify.com/CVE-2020-17035/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17034](https://insights.sbomify.com/CVE-2020-17034/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17033](https://insights.sbomify.com/CVE-2020-17033/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17032](https://insights.sbomify.com/CVE-2020-17032/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17031](https://insights.sbomify.com/CVE-2020-17031/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17030](https://insights.sbomify.com/CVE-2020-17030/): Windows MSCTF Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17029](https://insights.sbomify.com/CVE-2020-17029/): Windows Canonical Display Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17028](https://insights.sbomify.com/CVE-2020-17028/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17027](https://insights.sbomify.com/CVE-2020-17027/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17026](https://insights.sbomify.com/CVE-2020-17026/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17025](https://insights.sbomify.com/CVE-2020-17025/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17024](https://insights.sbomify.com/CVE-2020-17024/): Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17023](https://insights.sbomify.com/CVE-2020-17023/): Visual Studio JSON Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17022](https://insights.sbomify.com/CVE-2020-17022/): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17021](https://insights.sbomify.com/CVE-2020-17021/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2020-17020](https://insights.sbomify.com/CVE-2020-17020/): Microsoft Word Security Feature Bypass Vulnerability (low 3.3)
- [CVE-2020-1702](https://insights.sbomify.com/CVE-2020-1702/): Denial of service in containers/image (low 3.3)
- [CVE-2020-17019](https://insights.sbomify.com/CVE-2020-17019/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17018](https://insights.sbomify.com/CVE-2020-17018/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2020-17017](https://insights.sbomify.com/CVE-2020-17017/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-17016](https://insights.sbomify.com/CVE-2020-17016/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0)
- [CVE-2020-17015](https://insights.sbomify.com/CVE-2020-17015/): Microsoft SharePoint Server Spoofing Vulnerability (medium 4.3)
- [CVE-2020-17014](https://insights.sbomify.com/CVE-2020-17014/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17013](https://insights.sbomify.com/CVE-2020-17013/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17012](https://insights.sbomify.com/CVE-2020-17012/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17011](https://insights.sbomify.com/CVE-2020-17011/): Windows Port Class Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17010](https://insights.sbomify.com/CVE-2020-17010/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1701](https://insights.sbomify.com/CVE-2020-1701/): Permissions bypass in KubeVirt (medium 6.5)
- [CVE-2020-17007](https://insights.sbomify.com/CVE-2020-17007/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-17006](https://insights.sbomify.com/CVE-2020-17006/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2020-17005](https://insights.sbomify.com/CVE-2020-17005/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2020-17004](https://insights.sbomify.com/CVE-2020-17004/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-17003](https://insights.sbomify.com/CVE-2020-17003/): Base3D Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-17002](https://insights.sbomify.com/CVE-2020-17002/): Azure SDK for C Security Feature Bypass Vulnerability (high 7.4)
- [CVE-2020-17001](https://insights.sbomify.com/CVE-2020-17001/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-17000](https://insights.sbomify.com/CVE-2020-17000/): Remote Desktop Protocol Client Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-1700](https://insights.sbomify.com/CVE-2020-1700/): Denial of service in ceph (medium 6.5)
- [CVE-2020-16999](https://insights.sbomify.com/CVE-2020-16999/): Windows WalletService Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-16998](https://insights.sbomify.com/CVE-2020-16998/): DirectX Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-16997](https://insights.sbomify.com/CVE-2020-16997/): Remote Desktop Protocol Server Information Disclosure Vulnerability (high 7.7)
- [CVE-2020-16996](https://insights.sbomify.com/CVE-2020-16996/): Kerberos Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2020-16995](https://insights.sbomify.com/CVE-2020-16995/): Network Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16994](https://insights.sbomify.com/CVE-2020-16994/): Azure Sphere Unsigned Code Execution Vulnerability (high 7.3)
- [CVE-2020-16993](https://insights.sbomify.com/CVE-2020-16993/): Azure Sphere Elevation of Privilege Vulnerability (medium 5.4)
- [CVE-2020-16992](https://insights.sbomify.com/CVE-2020-16992/): Azure Sphere Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2020-16991](https://insights.sbomify.com/CVE-2020-16991/): Azure Sphere Unsigned Code Execution Vulnerability (high 7.3)
- [CVE-2020-16990](https://insights.sbomify.com/CVE-2020-16990/): Azure Sphere Information Disclosure Vulnerability (medium 6.2)
- [CVE-2020-1699](https://insights.sbomify.com/CVE-2020-1699/): Path traversal in ceph (high 7.5)
- [CVE-2020-16989](https://insights.sbomify.com/CVE-2020-16989/): Azure Sphere Elevation of Privilege Vulnerability (medium 5.4)
- [CVE-2020-16988](https://insights.sbomify.com/CVE-2020-16988/): Azure Sphere Elevation of Privilege Vulnerability (medium 6.9)
- [CVE-2020-16987](https://insights.sbomify.com/CVE-2020-16987/): Azure Sphere Unsigned Code Execution Vulnerability (high 7.3)
- [CVE-2020-16986](https://insights.sbomify.com/CVE-2020-16986/): Azure Sphere Denial of Service Vulnerability (medium 6.2)
- [CVE-2020-16985](https://insights.sbomify.com/CVE-2020-16985/): Azure Sphere Information Disclosure Vulnerability (medium 6.2)
- [CVE-2020-16984](https://insights.sbomify.com/CVE-2020-16984/): Azure Sphere Unsigned Code Execution Vulnerability (high 7.3)
- [CVE-2020-16983](https://insights.sbomify.com/CVE-2020-16983/): Azure Sphere Tampering Vulnerability (medium 5.7)
- [CVE-2020-16982](https://insights.sbomify.com/CVE-2020-16982/): Azure Sphere Unsigned Code Execution Vulnerability (medium 6.1)
- [CVE-2020-16981](https://insights.sbomify.com/CVE-2020-16981/): Azure Sphere Elevation of Privilege Vulnerability (medium 6.1)
- [CVE-2020-16980](https://insights.sbomify.com/CVE-2020-16980/): Windows iSCSI Target Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-1698](https://insights.sbomify.com/CVE-2020-1698/): Keycloak leaks sensitive information in logged exceptions (medium 5.0)
- [CVE-2020-16979](https://insights.sbomify.com/CVE-2020-16979/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.3)
- [CVE-2020-16978](https://insights.sbomify.com/CVE-2020-16978/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4)
- [CVE-2020-16977](https://insights.sbomify.com/CVE-2020-16977/): Visual Studio Code Python Extension Remote Code Execution Vulnerability (high 7.0)
- [CVE-2020-16976](https://insights.sbomify.com/CVE-2020-16976/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16975](https://insights.sbomify.com/CVE-2020-16975/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16974](https://insights.sbomify.com/CVE-2020-16974/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16973](https://insights.sbomify.com/CVE-2020-16973/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16972](https://insights.sbomify.com/CVE-2020-16972/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16971](https://insights.sbomify.com/CVE-2020-16971/): Azure SDK for Java Security Feature Bypass Vulnerability (high 7.4)
- [CVE-2020-16970](https://insights.sbomify.com/CVE-2020-16970/): Azure Sphere Unsigned Code Execution Vulnerability (high 8.1)
- [CVE-2020-1697](https://insights.sbomify.com/CVE-2020-1697/): XSS in Keycloak (medium 6.1)
- [CVE-2020-16969](https://insights.sbomify.com/CVE-2020-16969/): Microsoft Exchange Information Disclosure Vulnerability (high 7.1)
- [CVE-2020-16968](https://insights.sbomify.com/CVE-2020-16968/): Windows Camera Codec Pack Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-16967](https://insights.sbomify.com/CVE-2020-16967/): Windows Camera Codec Pack Remote Code Execution Vulnerability (high 7.8)
- [CVE-2020-16964](https://insights.sbomify.com/CVE-2020-16964/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16963](https://insights.sbomify.com/CVE-2020-16963/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-16962](https://insights.sbomify.com/CVE-2020-16962/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/147/