In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

Chromium CVE-2020-16044: Use after free in WebRTC

Windows Spoofing Vulnerability

Windows UPnP Service Elevation of Privilege Vulnerability

ASP.NET Core Denial of Service Vulnerability

TLS Information Disclosure Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Windows Media Audio Decoder Remote Code Execution Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection leading to a heap-based buffer overflow heap-based buffer over-read or use-after-free.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

Microsoft Windows Codecs Library Remote Code Execution Vulnerability