Known Exploited Vulnerabilities September 18, 2024 · CISA KEV Catalog

CVE-2020-0618: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-0618 Microsoft
Related: CVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2026-96951: Microsoft Windows Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 13, 2026
CVE-2026-65660: Microsoft Share Point Code Injection Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026