# Vulnerabilities published in 2020 - [CVE-2020-10060](https://insights.sbomify.com/CVE-2020-10060/): UpdateHub Might Dereference An Uninitialized Pointer (high 8.0) - [CVE-2020-1006](https://insights.sbomify.com/CVE-2020-1006/): Privilege escalation in Windows (high 7.8) - [CVE-2020-10059](https://insights.sbomify.com/CVE-2020-10059/): UpdateHub Module Explicitly Disables TLS Verification (medium 4.8) - [CVE-2020-10058](https://insights.sbomify.com/CVE-2020-10058/): Multiple Syscalls In kscan Subsystem Performs No Argument Validation (high 7.8) - [CVE-2020-10057](https://insights.sbomify.com/CVE-2020-10057/): Cross-site request forgery in metalgenix:genixcms (high 8.8) - [CVE-2020-10056](https://insights.sbomify.com/CVE-2020-10056/): Privilege escalation in License Management Utility (LMU) (high 7.8) - [CVE-2020-10055](https://insights.sbomify.com/CVE-2020-10055/): Code injection in Desigo CC (critical 9.8) - [CVE-2020-10054](https://insights.sbomify.com/CVE-2020-10054/): Denial of service in SIMATIC RTLS Locating Manager (medium 5.5) - [CVE-2020-10053](https://insights.sbomify.com/CVE-2020-10053/): Information disclosure in SIMATIC RTLS Locating Manager (medium 5.5) - [CVE-2020-10052](https://insights.sbomify.com/CVE-2020-10052/): Information disclosure in SIMATIC RTLS Locating Manager (medium 5.5) - [CVE-2020-10051](https://insights.sbomify.com/CVE-2020-10051/): Privilege escalation in SIMATIC RTLS Locating Manager (high 7.8) - [CVE-2020-10050](https://insights.sbomify.com/CVE-2020-10050/): Privilege escalation in SIMATIC RTLS Locating Manager (high 7.8) - [CVE-2020-1005](https://insights.sbomify.com/CVE-2020-1005/): Information disclosure in Windows (medium 5.5) - [CVE-2020-10049](https://insights.sbomify.com/CVE-2020-10049/): Command injection in SIMATIC RTLS Locating Manager (high 7.3) - [CVE-2020-10048](https://insights.sbomify.com/CVE-2020-10048/): Auth bypass in SIMATIC PCS 7 (medium 5.5) - [CVE-2020-10045](https://insights.sbomify.com/CVE-2020-10045/): Auth bypass in SICAM MMU (high 8.8) - [CVE-2020-10044](https://insights.sbomify.com/CVE-2020-10044/): Missing authorization in SICAM MMU (high 7.5) - [CVE-2020-10043](https://insights.sbomify.com/CVE-2020-10043/): Cross-site scripting in SICAM MMU (medium 6.1) - [CVE-2020-10042](https://insights.sbomify.com/CVE-2020-10042/): Memory corruption in SICAM MMU (critical 9.8) - [CVE-2020-10041](https://insights.sbomify.com/CVE-2020-10041/): Cross-site scripting in SICAM MMU (medium 6.1) - [CVE-2020-10040](https://insights.sbomify.com/CVE-2020-10040/): Information disclosure in SICAM MMU (medium 5.5) - [CVE-2020-1004](https://insights.sbomify.com/CVE-2020-1004/): Privilege escalation in Windows (high 7.8) - [CVE-2020-10039](https://insights.sbomify.com/CVE-2020-10039/): Weak cryptography in SICAM MMU (high 8.1) - [CVE-2020-10038](https://insights.sbomify.com/CVE-2020-10038/): Auth bypass in SICAM MMU (critical 9.8) - [CVE-2020-10037](https://insights.sbomify.com/CVE-2020-10037/): Memory corruption in SICAM MMU (high 7.5) - [CVE-2020-10030](https://insights.sbomify.com/CVE-2020-10030/): Memory corruption in powerdns:recursor (high 8.8) - [CVE-2020-1003](https://insights.sbomify.com/CVE-2020-1003/): Privilege escalation in Windows (high 7.8) - [CVE-2020-10029](https://insights.sbomify.com/CVE-2020-10029/): Memory corruption in canonical:ubuntu linux (medium 5.5) - [CVE-2020-10028](https://insights.sbomify.com/CVE-2020-10028/): Multiple Syscalls In GPIO Subsystem Performs No Argument Validation (high 7.8) - [CVE-2020-10027](https://insights.sbomify.com/CVE-2020-10027/): ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers (high 7.8) - [CVE-2020-10024](https://insights.sbomify.com/CVE-2020-10024/): ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers (high 7.8) - [CVE-2020-10023](https://insights.sbomify.com/CVE-2020-10023/): Shell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trim (medium 6.9) - [CVE-2020-10022](https://insights.sbomify.com/CVE-2020-10022/): UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array (critical 9.0) - [CVE-2020-10021](https://insights.sbomify.com/CVE-2020-10021/): Out-of-bounds write in USB Mass Storage with unaligned sizes (high 8.1) - [CVE-2020-1002](https://insights.sbomify.com/CVE-2020-1002/): Privilege escalation in Microsoft Forefront Endpoint Protection (high 7.1) - [CVE-2020-10019](https://insights.sbomify.com/CVE-2020-10019/): Buffer Overflow in USB DFU requested length (high 8.1) - [CVE-2020-10018](https://insights.sbomify.com/CVE-2020-10018/): Use after free in canonical:ubuntu linux (critical 9.8) - [CVE-2020-10017](https://insights.sbomify.com/CVE-2020-10017/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2020-10016](https://insights.sbomify.com/CVE-2020-10016/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2020-10015](https://insights.sbomify.com/CVE-2020-10015/): Memory corruption in macOS (high 7.8) - [CVE-2020-10014](https://insights.sbomify.com/CVE-2020-10014/): Path traversal in macOS (medium 6.3) - [CVE-2020-10013](https://insights.sbomify.com/CVE-2020-10013/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2020-10012](https://insights.sbomify.com/CVE-2020-10012/): Cross-site scripting in macOS (medium 6.1) - [CVE-2020-10011](https://insights.sbomify.com/CVE-2020-10011/): Memory corruption in macOS (high 7.8) - [CVE-2020-10010](https://insights.sbomify.com/CVE-2020-10010/): Path traversal in iOS and iPadOS (high 7.8) - [CVE-2020-1001](https://insights.sbomify.com/CVE-2020-1001/): Privilege escalation in Windows (high 7.8) - [CVE-2020-10009](https://insights.sbomify.com/CVE-2020-10009/): Security feature bypass in macOS (medium 5.5) - [CVE-2020-10008](https://insights.sbomify.com/CVE-2020-10008/): Business logic in macOS (medium 5.5) - [CVE-2020-10007](https://insights.sbomify.com/CVE-2020-10007/): Information disclosure in macOS (medium 5.5) - [CVE-2020-10006](https://insights.sbomify.com/CVE-2020-10006/): Security feature bypass in macOS (medium 5.5) - [CVE-2020-10005](https://insights.sbomify.com/CVE-2020-10005/): Denial of service in macOS (medium 6.5) - [CVE-2020-10004](https://insights.sbomify.com/CVE-2020-10004/): Business logic in iOS and iPadOS (high 7.8) - [CVE-2020-10003](https://insights.sbomify.com/CVE-2020-10003/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2020-10002](https://insights.sbomify.com/CVE-2020-10002/): Business logic in iOS and iPadOS (medium 5.5) - [CVE-2020-10001](https://insights.sbomify.com/CVE-2020-10001/): Information disclosure in macOS (medium 5.5) - [CVE-2020-1000](https://insights.sbomify.com/CVE-2020-1000/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0999](https://insights.sbomify.com/CVE-2020-0999/): Memory corruption in Windows (high 7.8) - [CVE-2020-0998](https://insights.sbomify.com/CVE-2020-0998/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2020-0997](https://insights.sbomify.com/CVE-2020-0997/): Windows Camera Codec Pack Remote Code Execution Vulnerability (high 7.8) - [CVE-2020-0996](https://insights.sbomify.com/CVE-2020-0996/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0995](https://insights.sbomify.com/CVE-2020-0995/): Memory corruption in Windows (high 7.8) - [CVE-2020-0994](https://insights.sbomify.com/CVE-2020-0994/): Memory corruption in Windows (high 7.8) - [CVE-2020-0993](https://insights.sbomify.com/CVE-2020-0993/): Denial of service in Windows (medium 6.5) - [CVE-2020-0992](https://insights.sbomify.com/CVE-2020-0992/): Memory corruption in Windows (high 7.8) - [CVE-2020-0991](https://insights.sbomify.com/CVE-2020-0991/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2020-0989](https://insights.sbomify.com/CVE-2020-0989/): Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-0988](https://insights.sbomify.com/CVE-2020-0988/): Memory corruption in Windows (high 7.8) - [CVE-2020-0987](https://insights.sbomify.com/CVE-2020-0987/): Information disclosure in Windows (medium 5.5) - [CVE-2020-0986](https://insights.sbomify.com/CVE-2020-0986/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2020-0985](https://insights.sbomify.com/CVE-2020-0985/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0984](https://insights.sbomify.com/CVE-2020-0984/): Privilege escalation in Microsoft AutoUpdate for Mac (high 7.8) - [CVE-2020-0983](https://insights.sbomify.com/CVE-2020-0983/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0982](https://insights.sbomify.com/CVE-2020-0982/): Information disclosure in Windows (medium 5.5) - [CVE-2020-0981](https://insights.sbomify.com/CVE-2020-0981/): Security feature bypass in Windows 10 Version 1903 for 32-bit Systems (high 8.8) - [CVE-2020-0980](https://insights.sbomify.com/CVE-2020-0980/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2020-0979](https://insights.sbomify.com/CVE-2020-0979/): Memory corruption in Office 365 ProPlus (high 8.8) - [CVE-2020-0978](https://insights.sbomify.com/CVE-2020-0978/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0977](https://insights.sbomify.com/CVE-2020-0977/): Other in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0976](https://insights.sbomify.com/CVE-2020-0976/): Other in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0975](https://insights.sbomify.com/CVE-2020-0975/): Other in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0974](https://insights.sbomify.com/CVE-2020-0974/): File upload in Microsoft SharePoint Enterprise Server (high 8.8) - [CVE-2020-0973](https://insights.sbomify.com/CVE-2020-0973/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0972](https://insights.sbomify.com/CVE-2020-0972/): Other in Microsoft SharePoint Enterprise Server (medium 5.4) - [CVE-2020-0971](https://insights.sbomify.com/CVE-2020-0971/): File upload in Microsoft SharePoint Enterprise Server (high 8.8) - [CVE-2020-0970](https://insights.sbomify.com/CVE-2020-0970/): ChakraCore Remote Code Execution Vulnerability (high 7.5) - [CVE-2020-0969](https://insights.sbomify.com/CVE-2020-0969/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2020-0968](https://insights.sbomify.com/CVE-2020-0968/): Microsoft Internet Explorer Scripting Engine Memory Corruption (high 7.5, exploited in the wild) - [CVE-2020-0967](https://insights.sbomify.com/CVE-2020-0967/): Memory corruption in Internet Explorer 11 (high 8.8) - [CVE-2020-0966](https://insights.sbomify.com/CVE-2020-0966/): Memory corruption in Internet Explorer 11 (high 8.8) - [CVE-2020-0965](https://insights.sbomify.com/CVE-2020-0965/): Memory corruption in Windows (high 7.8) - [CVE-2020-0964](https://insights.sbomify.com/CVE-2020-0964/): Memory corruption in Windows (high 8.8) - [CVE-2020-0963](https://insights.sbomify.com/CVE-2020-0963/): Windows GDI Information Disclosure Vulnerability (medium 5.5) - [CVE-2020-0962](https://insights.sbomify.com/CVE-2020-0962/): Information disclosure in Windows (medium 5.5) - [CVE-2020-0961](https://insights.sbomify.com/CVE-2020-0961/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2020-0960](https://insights.sbomify.com/CVE-2020-0960/): Memory corruption in Windows (high 7.8) - [CVE-2020-0959](https://insights.sbomify.com/CVE-2020-0959/): Memory corruption in Windows (high 7.8) - [CVE-2020-0958](https://insights.sbomify.com/CVE-2020-0958/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0957](https://insights.sbomify.com/CVE-2020-0957/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0956](https://insights.sbomify.com/CVE-2020-0956/): Privilege escalation in Windows (high 7.8) - [CVE-2020-0955](https://insights.sbomify.com/CVE-2020-0955/): Information disclosure in Windows (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2020/page/203/