# Vulnerabilities published in 2020 - [CVE-2020-16961](https://insights.sbomify.com/CVE-2020-16961/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16960](https://insights.sbomify.com/CVE-2020-16960/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-1696](https://insights.sbomify.com/CVE-2020-1696/): Cross-site scripting in pki-core (medium 4.6) - [CVE-2020-16959](https://insights.sbomify.com/CVE-2020-16959/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16958](https://insights.sbomify.com/CVE-2020-16958/): Windows Backup Engine Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16957](https://insights.sbomify.com/CVE-2020-16957/): Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16956](https://insights.sbomify.com/CVE-2020-16956/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16955](https://insights.sbomify.com/CVE-2020-16955/): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16954](https://insights.sbomify.com/CVE-2020-16954/): Microsoft Office Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16953](https://insights.sbomify.com/CVE-2020-16953/): Microsoft SharePoint Information Disclosure Vulnerability (medium 6.5) - [CVE-2020-16952](https://insights.sbomify.com/CVE-2020-16952/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.6) - [CVE-2020-16951](https://insights.sbomify.com/CVE-2020-16951/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.6) - [CVE-2020-16950](https://insights.sbomify.com/CVE-2020-16950/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.0) - [CVE-2020-1695](https://insights.sbomify.com/CVE-2020-1695/): Improper Input Validation in RESTEasy (high 7.5) - [CVE-2020-16949](https://insights.sbomify.com/CVE-2020-16949/): Microsoft Outlook Denial of Service Vulnerability (medium 4.7) - [CVE-2020-16948](https://insights.sbomify.com/CVE-2020-16948/): Microsoft SharePoint Information Disclosure Vulnerability (medium 6.5) - [CVE-2020-16947](https://insights.sbomify.com/CVE-2020-16947/): Microsoft Outlook Remote Code Execution Vulnerability (high 7.5) - [CVE-2020-16946](https://insights.sbomify.com/CVE-2020-16946/): Microsoft Office SharePoint XSS Vulnerability (high 8.7) - [CVE-2020-16945](https://insights.sbomify.com/CVE-2020-16945/): Microsoft Office SharePoint XSS Vulnerability (high 8.7) - [CVE-2020-16944](https://insights.sbomify.com/CVE-2020-16944/): Microsoft SharePoint Reflective XSS Vulnerability (high 8.7) - [CVE-2020-16943](https://insights.sbomify.com/CVE-2020-16943/): Dynamics 365 Commerce Elevation of Privilege Vulnerability (medium 6.5) - [CVE-2020-16942](https://insights.sbomify.com/CVE-2020-16942/): Microsoft SharePoint Information Disclosure Vulnerability (medium 4.1) - [CVE-2020-16941](https://insights.sbomify.com/CVE-2020-16941/): Microsoft SharePoint Information Disclosure Vulnerability (medium 4.1) - [CVE-2020-16940](https://insights.sbomify.com/CVE-2020-16940/): Windows - User Profile Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-1694](https://insights.sbomify.com/CVE-2020-1694/): Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak (medium 4.9) - [CVE-2020-16939](https://insights.sbomify.com/CVE-2020-16939/): Group Policy Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16938](https://insights.sbomify.com/CVE-2020-16938/): Windows Kernel Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16937](https://insights.sbomify.com/CVE-2020-16937/): .NET Framework Information Disclosure Vulnerability (medium 4.7) - [CVE-2020-16936](https://insights.sbomify.com/CVE-2020-16936/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16935](https://insights.sbomify.com/CVE-2020-16935/): Windows COM Server Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16934](https://insights.sbomify.com/CVE-2020-16934/): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (high 7.0) - [CVE-2020-16933](https://insights.sbomify.com/CVE-2020-16933/): Microsoft Word Security Feature Bypass Vulnerability (high 7.0) - [CVE-2020-16932](https://insights.sbomify.com/CVE-2020-16932/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16931](https://insights.sbomify.com/CVE-2020-16931/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16930](https://insights.sbomify.com/CVE-2020-16930/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-1693](https://insights.sbomify.com/CVE-2020-1693/): XML external entity in spacewalk (high 8.6) - [CVE-2020-16929](https://insights.sbomify.com/CVE-2020-16929/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16928](https://insights.sbomify.com/CVE-2020-16928/): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16927](https://insights.sbomify.com/CVE-2020-16927/): Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability (high 7.5) - [CVE-2020-16924](https://insights.sbomify.com/CVE-2020-16924/): Jet Database Engine Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16923](https://insights.sbomify.com/CVE-2020-16923/): Microsoft Graphics Components Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16922](https://insights.sbomify.com/CVE-2020-16922/): Windows Spoofing Vulnerability (medium 5.3) - [CVE-2020-16921](https://insights.sbomify.com/CVE-2020-16921/): Windows Text Services Framework Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16920](https://insights.sbomify.com/CVE-2020-16920/): Windows Application Compatibility Client Library Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-1692](https://insights.sbomify.com/CVE-2020-1692/): Cross-Site Request Forgery in Moodle (high 8.1) - [CVE-2020-16919](https://insights.sbomify.com/CVE-2020-16919/): Windows Enterprise App Management Service Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16918](https://insights.sbomify.com/CVE-2020-16918/): Base3D Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16916](https://insights.sbomify.com/CVE-2020-16916/): Windows COM Server Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16915](https://insights.sbomify.com/CVE-2020-16915/): Media Foundation Memory Corruption Vulnerability (high 7.8) - [CVE-2020-16914](https://insights.sbomify.com/CVE-2020-16914/): Windows GDI+ Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16913](https://insights.sbomify.com/CVE-2020-16913/): Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16912](https://insights.sbomify.com/CVE-2020-16912/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16911](https://insights.sbomify.com/CVE-2020-16911/): GDI+ Remote Code Execution Vulnerability (high 8.8) - [CVE-2020-16910](https://insights.sbomify.com/CVE-2020-16910/): Windows Security Feature Bypass Vulnerability (medium 6.2) - [CVE-2020-1691](https://insights.sbomify.com/CVE-2020-1691/): Moodle XSS Vulnerability (medium 5.4) - [CVE-2020-16909](https://insights.sbomify.com/CVE-2020-16909/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16908](https://insights.sbomify.com/CVE-2020-16908/): Windows Setup Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16907](https://insights.sbomify.com/CVE-2020-16907/): Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16905](https://insights.sbomify.com/CVE-2020-16905/): Windows Error Reporting Elevation of Privilege Vulnerability (medium 6.8) - [CVE-2020-16904](https://insights.sbomify.com/CVE-2020-16904/): Azure Functions Elevation of Privilege Vulnerability (medium 5.3) - [CVE-2020-16902](https://insights.sbomify.com/CVE-2020-16902/): Windows Installer Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16901](https://insights.sbomify.com/CVE-2020-16901/): Windows Kernel Information Disclosure Vulnerability (medium 5.0) - [CVE-2020-16900](https://insights.sbomify.com/CVE-2020-16900/): Windows Event System Elevation of Privilege Vulnerability (high 7.0) - [CVE-2020-1690](https://insights.sbomify.com/CVE-2020-1690/): Privilege escalation in openstack-selinux (medium 6.5) - [CVE-2020-16899](https://insights.sbomify.com/CVE-2020-16899/): Windows TCP/IP Denial of Service Vulnerability (high 7.5) - [CVE-2020-16898](https://insights.sbomify.com/CVE-2020-16898/): Windows TCP/IP Remote Code Execution Vulnerability (high 8.8) - [CVE-2020-16897](https://insights.sbomify.com/CVE-2020-16897/): NetBT Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16896](https://insights.sbomify.com/CVE-2020-16896/): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (high 7.5) - [CVE-2020-16895](https://insights.sbomify.com/CVE-2020-16895/): Windows Error Reporting Manager Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16894](https://insights.sbomify.com/CVE-2020-16894/): Windows NAT Denial of Service Vulnerability (high 7.7) - [CVE-2020-16892](https://insights.sbomify.com/CVE-2020-16892/): Windows Image Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16891](https://insights.sbomify.com/CVE-2020-16891/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8) - [CVE-2020-16890](https://insights.sbomify.com/CVE-2020-16890/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-1689](https://insights.sbomify.com/CVE-2020-1689/): Denial of service in Junos OS (medium 6.5) - [CVE-2020-16889](https://insights.sbomify.com/CVE-2020-16889/): Windows KernelStream Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16887](https://insights.sbomify.com/CVE-2020-16887/): Windows Network Connections Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16886](https://insights.sbomify.com/CVE-2020-16886/): PowerShellGet Module WDAC Security Feature Bypass Vulnerability (medium 5.3) - [CVE-2020-16885](https://insights.sbomify.com/CVE-2020-16885/): Windows Storage VSP Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-16884](https://insights.sbomify.com/CVE-2020-16884/): Internet Explorer Browser Helper Object (BHO) Memory Corruption Vulnerability (medium 4.2) - [CVE-2020-16881](https://insights.sbomify.com/CVE-2020-16881/): Visual Studio JSON Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-1688](https://insights.sbomify.com/CVE-2020-1688/): Junos OS: SRX and NFX Series: Insufficient Web API private key protection (medium 6.5) - [CVE-2020-16879](https://insights.sbomify.com/CVE-2020-16879/): Projected Filesystem Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-16878](https://insights.sbomify.com/CVE-2020-16878/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16877](https://insights.sbomify.com/CVE-2020-16877/): Windows Elevation of Privilege Vulnerability (high 7.1) - [CVE-2020-16876](https://insights.sbomify.com/CVE-2020-16876/): Windows Application Compatibility Client Library Elevation of Privilege Vulnerability (high 7.1) - [CVE-2020-16875](https://insights.sbomify.com/CVE-2020-16875/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.4) - [CVE-2020-16874](https://insights.sbomify.com/CVE-2020-16874/): Visual Studio Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-16873](https://insights.sbomify.com/CVE-2020-16873/): Xamarin.Forms Spoofing Vulnerability (medium 4.7) - [CVE-2020-16872](https://insights.sbomify.com/CVE-2020-16872/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (high 7.6) - [CVE-2020-16871](https://insights.sbomify.com/CVE-2020-16871/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-1687](https://insights.sbomify.com/CVE-2020-1687/): Denial of service in Junos OS (medium 6.5) - [CVE-2020-16864](https://insights.sbomify.com/CVE-2020-16864/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16863](https://insights.sbomify.com/CVE-2020-16863/): Windows Remote Desktop Service Denial of Service Vulnerability (high 7.5) - [CVE-2020-16862](https://insights.sbomify.com/CVE-2020-16862/): Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability (high 7.1) - [CVE-2020-16861](https://insights.sbomify.com/CVE-2020-16861/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16860](https://insights.sbomify.com/CVE-2020-16860/): Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability (medium 6.8) - [CVE-2020-1686](https://insights.sbomify.com/CVE-2020-1686/): Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet. (high 7.5) - [CVE-2020-16859](https://insights.sbomify.com/CVE-2020-16859/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16858](https://insights.sbomify.com/CVE-2020-16858/): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (medium 5.4) - [CVE-2020-16857](https://insights.sbomify.com/CVE-2020-16857/): Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability (high 7.1) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/148/