# Vulnerabilities published in 2020


- [CVE-2020-0954](https://insights.sbomify.com/CVE-2020-0954/): Cross-site scripting in Microsoft Project Server (medium 5.4)
- [CVE-2020-0953](https://insights.sbomify.com/CVE-2020-0953/): Memory corruption in Windows (high 7.8)
- [CVE-2020-0952](https://insights.sbomify.com/CVE-2020-0952/): Information disclosure in Windows (medium 6.5)
- [CVE-2020-0951](https://insights.sbomify.com/CVE-2020-0951/): Windows Defender Application Control Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2020-0950](https://insights.sbomify.com/CVE-2020-0950/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0949](https://insights.sbomify.com/CVE-2020-0949/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0948](https://insights.sbomify.com/CVE-2020-0948/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0947](https://insights.sbomify.com/CVE-2020-0947/): Information disclosure in Windows 10 Version 1903 for 32-bit Systems (medium 5.5)
- [CVE-2020-0946](https://insights.sbomify.com/CVE-2020-0946/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0945](https://insights.sbomify.com/CVE-2020-0945/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0944](https://insights.sbomify.com/CVE-2020-0944/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0943](https://insights.sbomify.com/CVE-2020-0943/): Auth bypass in Microsoft Your Phone Companion App for Android (medium 4.6)
- [CVE-2020-0942](https://insights.sbomify.com/CVE-2020-0942/): Privilege escalation in Windows (high 7.1)
- [CVE-2020-0941](https://insights.sbomify.com/CVE-2020-0941/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-0940](https://insights.sbomify.com/CVE-2020-0940/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0939](https://insights.sbomify.com/CVE-2020-0939/): Information disclosure in Windows 10 Version 1903 for 32-bit Systems (medium 5.5)
- [CVE-2020-0938](https://insights.sbomify.com/CVE-2020-0938/): Microsoft Windows Adobe Font Manager Library Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2020-0937](https://insights.sbomify.com/CVE-2020-0937/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0936](https://insights.sbomify.com/CVE-2020-0936/): Privilege escalation in Windows (high 7.1)
- [CVE-2020-0935](https://insights.sbomify.com/CVE-2020-0935/): Privilege escalation in OneDrive for Windows (medium 5.5)
- [CVE-2020-0934](https://insights.sbomify.com/CVE-2020-0934/): Memory corruption in Windows (high 7.8)
- [CVE-2020-0933](https://insights.sbomify.com/CVE-2020-0933/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0932](https://insights.sbomify.com/CVE-2020-0932/): File upload in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-0931](https://insights.sbomify.com/CVE-2020-0931/): File upload in Microsoft Business Productivity Servers (high 8.8)
- [CVE-2020-0930](https://insights.sbomify.com/CVE-2020-0930/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0929](https://insights.sbomify.com/CVE-2020-0929/): File upload in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-0928](https://insights.sbomify.com/CVE-2020-0928/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-0927](https://insights.sbomify.com/CVE-2020-0927/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0926](https://insights.sbomify.com/CVE-2020-0926/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0925](https://insights.sbomify.com/CVE-2020-0925/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0924](https://insights.sbomify.com/CVE-2020-0924/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0923](https://insights.sbomify.com/CVE-2020-0923/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0922](https://insights.sbomify.com/CVE-2020-0922/): Microsoft COM for Windows Remote Code Execution Vulnerability (high 8.8)
- [CVE-2020-0921](https://insights.sbomify.com/CVE-2020-0921/): Microsoft Graphics Component Denial of Service Vulnerability (medium 5.5)
- [CVE-2020-0920](https://insights.sbomify.com/CVE-2020-0920/): File upload in Microsoft SharePoint Enterprise Server (high 8.8)
- [CVE-2020-0919](https://insights.sbomify.com/CVE-2020-0919/): Privilege escalation in Microsoft Remote Desktop for Mac (high 7.8)
- [CVE-2020-0918](https://insights.sbomify.com/CVE-2020-0918/): Privilege escalation in Windows (medium 6.8)
- [CVE-2020-0917](https://insights.sbomify.com/CVE-2020-0917/): Privilege escalation in Windows (medium 6.8)
- [CVE-2020-0916](https://insights.sbomify.com/CVE-2020-0916/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0915](https://insights.sbomify.com/CVE-2020-0915/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0914](https://insights.sbomify.com/CVE-2020-0914/): Windows State Repository Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-0913](https://insights.sbomify.com/CVE-2020-0913/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0912](https://insights.sbomify.com/CVE-2020-0912/): Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2020-0911](https://insights.sbomify.com/CVE-2020-0911/): Windows Modules Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-0910](https://insights.sbomify.com/CVE-2020-0910/): Code injection in Windows (high 8.4)
- [CVE-2020-0909](https://insights.sbomify.com/CVE-2020-0909/): Windows Hyper-V Denial of Service Vulnerability (high 7.5)
- [CVE-2020-0908](https://insights.sbomify.com/CVE-2020-0908/): Windows Text Service Module Remote Code Execution Vulnerability (high 7.5)
- [CVE-2020-0907](https://insights.sbomify.com/CVE-2020-0907/): Memory corruption in Windows (high 7.8)
- [CVE-2020-0906](https://insights.sbomify.com/CVE-2020-0906/): Memory corruption in Microsoft Excel (high 8.8)
- [CVE-2020-0905](https://insights.sbomify.com/CVE-2020-0905/): Other in Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise) (high 8.0)
- [CVE-2020-0904](https://insights.sbomify.com/CVE-2020-0904/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-0903](https://insights.sbomify.com/CVE-2020-0903/): Cross-site scripting in Microsoft Exchange Server 2016 Cumulative Update 14 (medium 5.4)
- [CVE-2020-0902](https://insights.sbomify.com/CVE-2020-0902/): Privilege escalation in Service Fabric (critical 9.8)
- [CVE-2020-0901](https://insights.sbomify.com/CVE-2020-0901/): Microsoft Excel Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2020-0900](https://insights.sbomify.com/CVE-2020-0900/): Privilege escalation in Microsoft Visual Studio (medium 5.5)
- [CVE-2020-0899](https://insights.sbomify.com/CVE-2020-0899/): Privilege escalation in Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) (medium 5.5)
- [CVE-2020-0898](https://insights.sbomify.com/CVE-2020-0898/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0897](https://insights.sbomify.com/CVE-2020-0897/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0896](https://insights.sbomify.com/CVE-2020-0896/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0895](https://insights.sbomify.com/CVE-2020-0895/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2020-0894](https://insights.sbomify.com/CVE-2020-0894/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0893](https://insights.sbomify.com/CVE-2020-0893/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0892](https://insights.sbomify.com/CVE-2020-0892/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2020-0891](https://insights.sbomify.com/CVE-2020-0891/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2020-0890](https://insights.sbomify.com/CVE-2020-0890/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2020-0889](https://insights.sbomify.com/CVE-2020-0889/): Memory corruption in Windows (high 7.8)
- [CVE-2020-0888](https://insights.sbomify.com/CVE-2020-0888/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0887](https://insights.sbomify.com/CVE-2020-0887/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0886](https://insights.sbomify.com/CVE-2020-0886/): Windows Storage Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-0885](https://insights.sbomify.com/CVE-2020-0885/): Information disclosure in Windows (medium 4.3)
- [CVE-2020-0884](https://insights.sbomify.com/CVE-2020-0884/): Weak cryptography in Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) (low 3.7)
- [CVE-2020-0883](https://insights.sbomify.com/CVE-2020-0883/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0882](https://insights.sbomify.com/CVE-2020-0882/): Information disclosure in Windows (medium 6.5)
- [CVE-2020-0881](https://insights.sbomify.com/CVE-2020-0881/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0880](https://insights.sbomify.com/CVE-2020-0880/): Information disclosure in Windows (medium 6.5)
- [CVE-2020-0879](https://insights.sbomify.com/CVE-2020-0879/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0878](https://insights.sbomify.com/CVE-2020-0878/): Microsoft Edge and Internet Explorer Memory Corruption (medium 4.2, exploited in the wild)
- [CVE-2020-0877](https://insights.sbomify.com/CVE-2020-0877/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0876](https://insights.sbomify.com/CVE-2020-0876/): Information disclosure in Windows 10 Version 1903 for 32-bit Systems (high 7.5)
- [CVE-2020-0875](https://insights.sbomify.com/CVE-2020-0875/): Microsoft splwow64 Information Disclosure Vulnerability (medium 5.5)
- [CVE-2020-0874](https://insights.sbomify.com/CVE-2020-0874/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0872](https://insights.sbomify.com/CVE-2020-0872/): Cross-site scripting in Application Inspector (critical 9.6)
- [CVE-2020-0871](https://insights.sbomify.com/CVE-2020-0871/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0870](https://insights.sbomify.com/CVE-2020-0870/): Shell infrastructure component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2020-0869](https://insights.sbomify.com/CVE-2020-0869/): Memory corruption in Windows (high 8.8)
- [CVE-2020-0868](https://insights.sbomify.com/CVE-2020-0868/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0867](https://insights.sbomify.com/CVE-2020-0867/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0866](https://insights.sbomify.com/CVE-2020-0866/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0865](https://insights.sbomify.com/CVE-2020-0865/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0864](https://insights.sbomify.com/CVE-2020-0864/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0863](https://insights.sbomify.com/CVE-2020-0863/): Information disclosure in Windows 10 Version 1903 for 32-bit Systems (medium 5.5)
- [CVE-2020-0861](https://insights.sbomify.com/CVE-2020-0861/): Information disclosure in Windows (high 7.8)
- [CVE-2020-0860](https://insights.sbomify.com/CVE-2020-0860/): Memory corruption in Windows (high 7.8)
- [CVE-2020-0859](https://insights.sbomify.com/CVE-2020-0859/): Information disclosure in Windows (medium 5.5)
- [CVE-2020-0858](https://insights.sbomify.com/CVE-2020-0858/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0857](https://insights.sbomify.com/CVE-2020-0857/): Privilege escalation in Windows (high 7.8)
- [CVE-2020-0856](https://insights.sbomify.com/CVE-2020-0856/): Active Directory Information Disclosure Vulnerability (medium 6.5)
- [CVE-2020-0855](https://insights.sbomify.com/CVE-2020-0855/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2020-0854](https://insights.sbomify.com/CVE-2020-0854/): Privilege escalation in Windows (high 7.1)
- [CVE-2020-0853](https://insights.sbomify.com/CVE-2020-0853/): Information disclosure in Windows (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2020/page/204/