Patch Tuesday Archive
Patch Tuesday March 2020
Total CVEs
118
Critical
26
Important
90
Exploited
1
Publicly Disclosed
1
All CVEs this month 118
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2020-0684 | LNK Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0700 | Azure DevOps Server Cross-site Scripting Vulnerability | Important | 5.4 |
Azure DevOps | - | - | - |
| CVE-2020-0758 | Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability | Important | 7.5 |
Azure DevOps | - | - | - |
| CVE-2020-0762 | Windows Defender Security Center Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Defender | - | - | - |
| CVE-2020-0763 | Windows Defender Security Center Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Defender | - | - | - |
| CVE-2020-0765 | Remote Desktop Connection Manager Information Disclosure Vulnerability | Important | 5.5 |
Remote Desktop Connection Manager | - | - | - |
| CVE-2020-0777 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0778 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0779 | Windows Installer Elevation of Privilege Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0780 | Windows Network List Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0781 | Windows UPnP Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0783 | Windows UPnP Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0785 | Windows User Profile Service Elevation of Privilege Vulnerability | Important | 7.1 |
Microsoft Windows | - | - | - |
| CVE-2020-0786 | Windows Tile Object Service Denial of Service Vulnerability | Important | 7.1 |
Microsoft Windows | - | - | - |
| CVE-2020-0787 | Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0788 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0789 | Visual Studio Extension Installer Service Denial of Service Vulnerability | Important | 7.1 |
Visual Studio | - | - | - |
| CVE-2020-0796 | Windows SMBv3 Client/Server Remote Code Execution Vulnerability | Critical | 10 |
Windows SMB | - | Yes | - |
| CVE-2020-0797 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0798 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0799 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0800 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0801 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0802 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0803 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0804 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0806 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0807 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0808 | Provisioning Runtime Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0809 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0810 | Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0811 | Chakra Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0812 | Chakra Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0813 | Scripting Engine Information Disclosure Vulnerability | Important | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0814 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0815 | Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability | Important | 7.5 |
Azure DevOps | - | - | - |
| CVE-2020-0823 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0834 | Windows ALPC Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0840 | Windows Hard Link Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0841 | Windows Hard Link Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0842 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0843 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0844 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0845 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0849 | Windows Hard Link Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0850 | Microsoft Word Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-0851 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0852 | Microsoft Word Remote Code Execution Vulnerability | Critical | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0853 | Windows Imaging Component Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0854 | Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability | Important | 7.1 |
Windows Diagnostic Hub | - | - | - |
| CVE-2020-0855 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0872 | Remote Code Execution Vulnerability in Application Inspector | Important | 9.6 |
Open Source Software | - | - | - |
| CVE-2020-0884 | Microsoft Visual Studio Spoofing Vulnerability | Important | 3.7 |
Visual Studio | - | - | - |
| CVE-2020-0891 | Microsoft SharePoint Reflective XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0892 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0893 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0894 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0903 | Microsoft Exchange Server Spoofing Vulnerability | Important | 5.4 |
Microsoft Exchange Server | - | - | - |
| ADV200005 | Microsoft Guidance for Disabling SMBv3 Compression | Critical | - | Windows SMB | - | - | - |
| CVE-2020-0645 | Microsoft IIS Server Tampering Vulnerability | Important | 7.5 |
Windows IIS | - | - | - |
| CVE-2020-0690 | DirectX Elevation of Privilege Vulnerability | Important | 9.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0768 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Browsers | - | - | - |
| CVE-2020-0769 | Windows CSC Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0770 | Windows ActiveX Installer Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0771 | Windows CSC Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0772 | Windows Error Reporting Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0773 | Windows ActiveX Installer Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0774 | Windows GDI Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0775 | Windows Error Reporting Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0776 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0791 | Windows Graphics Component Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0793 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0795 | Microsoft SharePoint Reflective XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0816 | Microsoft Edge Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Edge (HTML-based) | - | - | - |
| CVE-2020-0819 | Windows Device Setup Manager Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0820 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0822 | Windows Language Pack Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0824 | Internet Explorer Memory Corruption Vulnerability | Critical | 7.5 |
Internet Explorer | - | - | - |
| CVE-2020-0825 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0826 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0827 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0828 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0829 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0830 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0831 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0832 | Scripting Engine Memory Corruption Vulnerability | Moderate | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0833 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0847 | VBScript Remote Code Execution Vulnerability | Moderate | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0848 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0857 | Windows Search Indexer Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0858 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0859 | Windows Modules Installer Service Information Disclosure Vulnerability | Important | 5.5 |
Windows Installer | - | - | - |
| CVE-2020-0860 | Windows ActiveX Installer Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0861 | Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0863 | Connected User Experiences and Telemetry Service Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0864 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0865 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0866 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0867 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0868 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2020-0869 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0871 | Windows Network Connections Service Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0874 | Windows GDI Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0876 | Win32k Information Disclosure Vulnerability | Important | 7.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0877 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0879 | Windows GDI Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0880 | Windows GDI Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0881 | GDI+ Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0882 | Windows GDI Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0883 | GDI+ Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0885 | Windows Graphics Component Information Disclosure Vulnerability | Important | 4.3 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0887 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0896 | Windows Hard Link Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0897 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0898 | Windows Graphics Component Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0902 | Service Fabric Elevation of Privilege | Important | 9.8 |
Azure | - | - | - |
| CVE-2020-0905 | Dynamics Business Central Remote Code Execution Vulnerability | Critical | 8 |
Microsoft Dynamics | - | - | - |
| ADV200006 | Type 1 Font Parsing Remote Code Execution Vulnerability | Important | - | Microsoft Graphics Component | Yes | - | - |
Threat Categories 6
| Threat Category | CVEs | Critical |
|---|---|---|
| Elevation of Privilege | 58 | - |
| Remote Code Execution | 34 | 26 |
| Information Disclosure | 16 | - |
| Spoofing | 7 | - |
| Denial of Service | 2 | - |
| Tampering | 1 | - |
Affected Products 21
| Product | CVEs | Exploited |
|---|---|---|
| Microsoft Windows | 51 | - |
| Microsoft Scripting Engine | 15 | - |
| Microsoft Graphics Component | 14 | 1 |
| Windows Installer | 8 | - |
| Microsoft Office | 5 | - |
| Microsoft Office SharePoint | 4 | - |
| Azure DevOps | 3 | - |
| Visual Studio | 2 | - |
| Windows Defender | 2 | - |
| Windows Kernel | 2 | - |
| Windows SMB | 2 | - |
| Azure | 1 | - |
| Internet Explorer | 1 | - |
| Microsoft Browsers | 1 | - |
| Microsoft Dynamics | 1 | - |
| Microsoft Edge (HTML-based) | 1 | - |
| Microsoft Exchange Server | 1 | - |
| Open Source Software | 1 | - |
| Remote Desktop Connection Manager | 1 | - |
| Windows Diagnostic Hub | 1 | - |
| Windows IIS | 1 | - |