CVE-2020-12900
published 2021-11-15CVE-2020-12900: An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and…
PriorityP335high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
14.8th percentile
An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | amd_radeon_software | >= Radeon Pro Software for Enterprise < 21.Q2 | 21.Q2 |
| amd | amd_radeon_software | >= Radeon Software < 20.7.1 | 20.7.1 |
| amd | radeon_software | < 20.7.1 | 20.7.1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_oracle8.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wqp5-c9j9-mhqr: An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileg
ghsa_unreviewed·2022-05-24
CVE-2020-12900 [HIGH] CWE-269 GHSA-wqp5-c9j9-mhqr: An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileg
An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.
Oracle
Oracle Oracle Database Server Risk Matrix: Core RDBMS (bzip2) — CVE-2019-12900
vendor_oracle·2020-10-15·CVSS 8.8
CVE-2019-12900 [CRITICAL] Oracle Oracle Database Server Risk Matrix: Core RDBMS (bzip2) — CVE-2019-12900
Oracle Oracle Database Server Risk Matrix: Core RDBMS (bzip2) vulnerability
CVE: CVE-2019-12900
CVSS: 8.8
Protocol: Oracle Net
Remote exploit: No
Affected versions: Network
Advisory: cpuoct2020 (OCT 2020)
No detection rules found.
No writeups or analysis indexed.
2021-11-15
Published