CVE-2020-0595

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jun 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-05967.5Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may aCVE-2020-05977.5Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentialCVE-2020-05987.8Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated uCVE-2020-05996.7Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege viCVE-2020-06007.8Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilegeCVE-2020-06018.1A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacCVE-2020-06027.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service VulnerabilitCVE-2020-06038.8A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who suCVE-2020-06047.8A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attackeCVE-2020-06058.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who sCVE-2020-06068.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who sCVE-2020-06075.5An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphi
CVE-2020-0595: Critical severity, CVSS 9.8 | Vulnix