微软致谢
2022年（获得7个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| CVE-2022-21880 | yyjb with http://blog.noah.360.net/ | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2022-21897 | Thunder J and Boxer | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-21916 | BugHunter010 with KunLun Lab Thunder J and Boxer | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-21968 | Steven Seeley (mr_me) | Microsoft SharePoint Server Security Feature BypassVulnerability |
| CVE-2022-21993 | yyjb with http://blog.noah.360.net/ | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
| CVE-2022-22043 | Thunder_J and Boxer with Vulnerability Research Institute | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
| CVE-2022-30220 | Thunder_J and Boxer with Vulnerability Research Institute Boxer with Vulnerability Research Institute | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
2021年（获得123个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| CVE-2021-1637 | pgboy of 360vulcan(https://weibo.com/pgboy1988) | Windows DNS Query Information Disclosure Vulnerability |
| CVE-2021-1648 | k0shl | Microsoft splwow64 Elevation of Privilege Vulnerability |
| CVE-2021-1658 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1660 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1663 | k0shl | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
| CVE-2021-1664 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1666 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1667 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1668 | yangkang (@dnpushme) | Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability |
| CVE-2021-1670 | k0shl | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
| CVE-2021-1671 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1672 | k0shl | Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
| CVE-2021-1673 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1691 | Wei | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2021-1692 | Wei | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2021-1696 | yangkang(@dnpushme) | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2021-1700 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1701 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-1702 | Yuki Chen | Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability |
| CVE-2021-1708 | yangkang(@dnpushme) | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2021-1710 | yangkang(@dnpushme) | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
| CVE-2021-1716 | Zhangjie and willJ | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2021-1734 | Yuki Chen | Windows Remote Procedure Call Information Disclosure Vulnerability |
| CVE-2021-24071 | Steven Seeley (mr_me) | Microsoft SharePoint Information Disclosure Vulnerability |
| CVE-2021-24075 | Wei | Microsoft Windows VMSwitch Denial of Service Vulnerability |
| CVE-2021-24085 | Steven Seeley (mr_me) of Source Incite Source Incite | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2021-24095 | liuxiaoliang and pjf | DirectX Elevation of Privilege Vulnerability |
| CVE-2021-24102 | Yuki Chen | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-24103 | Yuki Chen | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-24106 | k0shl | Windows DirectX Information Disclosure Vulnerability |
| CVE-2021-26412 | Steven Seeley (mr_me) | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26417 | k0shl | Windows Overlay Filter Information Disclosure Vulnerability |
| CVE-2021-26854 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26868 | liuxiaoliang and pjf | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2021-26872 | Yuki Chen | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-26876 | Keqi Hu | OpenType Font Parsing Remote Code Execution Vulnerability |
| CVE-2021-26898 | Yuki Chen | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-26899 | Yuki Chen | Windows UPnP Device Host Elevation of Privilege Vulnerability |
| CVE-2021-26901 | Yuki Chen | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-27072 | pgboy | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-27078 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-27095 | yangkang (@dnpushme) | Windows Media Video Decoder Remote Code Execution Vulnerability |
| CVE-2021-28315 | yangkang(@dnpushme) | Windows Media Video Decoder Remote Code Execution Vulnerability |
| CVE-2021-28317 | Zhangjie and willJ | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
| CVE-2021-28318 | Zhangjie and willJ | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2021-28329 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28330 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28331 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28332 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28333 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28334 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28335 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28336 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28337 | Yuki Chen of Vulcan Team | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28338 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28339 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28340 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28341 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28342 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28343 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28344 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28345 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28346 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28352 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28353 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28354 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28355 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28356 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28357 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28358 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28434 | Yuki Chen | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2021-28438 | shijie xu(@ThunderJ17) | Windows Console Driver Denial of Service Vulnerability |
| CVE-2021-28446 | vbty | Windows Portmapping Information Disclosure Vulnerability |
| CVE-2021-28456 | Zhangjie and willJ from cdsrc | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2021-31172 | Steven Seeley (mr_me) | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2021-31186 | vbty | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2021-31192 | Zhangjie and willJ from cdsrc | Windows Media Foundation Core Remote Code Execution Vulnerability |
| CVE-2021-31193 | shijie xu(@ThunderJ17) | Windows SSDP Service Elevation of Privilege Vulnerability |
| CVE-2021-31194 | Yuki Chen | OLE Automation Remote Code Execution Vulnerability |
| CVE-2021-31206 | Steven Seeley (mr_me) of Source Incite working with Trend Micro Zero Day Initiative | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-31940 | Zhangjie and willJ from cdsrc | Microsoft Office Graphics Remote Code Execution Vulnerability |
| CVE-2021-31960 | k0shl | Windows Bind Filter Driver Information Disclosure Vulnerability |
| CVE-2021-31965 | Steven Seeley (mr_me) | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2021-31969 | Keqi Hu | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2021-33743 | k0shl | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2021-33746 | Yuki Chen | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-33749 | Yuki Chen | Windows DNS Snap-in Remote Code Execution Vulnerability |
| CVE-2021-33750 | Yuki Chen | Windows DNS Snap-in Remote Code Execution Vulnerability |
| CVE-2021-33752 | Yuki Chen | Windows DNS Snap-in Remote Code Execution Vulnerability |
| CVE-2021-33754 | Yuki Chen | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-33756 | Yuki Chen | Windows DNS Snap-in Remote Code Execution Vulnerability |
| CVE-2021-33780 | Yuki Chen | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-34440 | Keqi Hu | GDI+ Information Disclosure Vulnerability |
| CVE-2021-34447 | Yuki Chen | Windows MSHTML Platform Remote Code Execution Vulnerability |
| CVE-2021-34448 | yangkang(@dnpushme)&bianliang&wanggang&lihongfei of 360 ATA | Scripting Engine Memory Corruption Vulnerability |
| CVE-2021-34449 | 晏子霜在线征婚 (@YanZiShuang) of Big CJTeam | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-34460 | k0shl | Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2021-34461 | k0shl | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
| CVE-2021-34468 | Steven Seeley (mr_me) of Source Incite working with Trend Micro Zero Day Initiative | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2021-34488 | Vbty | Windows Console Driver Elevation of Privilege Vulnerability |
| CVE-2021-34494 | Yuki Chen | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-34496 | Zhangjie and willJ | Windows GDI Information Disclosure Vulnerability |
| CVE-2021-34497 | Yuki Chen | Windows MSHTML Platform Remote Code Execution Vulnerability |
| CVE-2021-34504 | BOXER (@SecBoxer) | Windows Address Book Remote Code Execution Vulnerability |
| CVE-2021-34509 | Vbty | Storage Spaces Controller Information Disclosure Vulnerability |
| CVE-2021-34519 | mr_me working with Trend Micro Zero Day Initiative | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2021-34525 | Yuki Chen | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-38657 | ShiLongan with NSFOCUS TIANJI LAB,Zesen Ye (@wh1tc) and Zhiniang Peng (@edwardzpeng) with Sangfor,Zhangjie and willJ | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| CVE-2021-38660 | Jinquan(@jq0904) with DBAPPSecurity Lieying Lab | Microsoft Office Graphics Remote Code Execution Vulnerability |
| CVE-2021-42321 | zcgonvh @ 360 noah lab,pwnforsp,Microsoft Security Response Center,Microsoft Threat Intelligence Center (MSTIC) | Microsoft Exchange Server Remote Code Execution Vulnerability |
2020年 （获得384个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| ADV200001 | Yi Huang(@C0rk1_H) & Kang Yang(@dnpushme) of Qihoo 360 ATA | Microsoft Guidance on Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0613 | zhong_sf of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0614 | zhong_sf of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0616 | Zhiniang Peng of Qihoo 360 Core security and Jiadong Lu | Microsoft Windows Denial of Service Vulnerability |
| CVE-2020-0617 | HongZhenhao of IceSword Lab, Qihoo 360 | Hyper-V Denial of Service Vulnerability |
| CVE-2020-0622 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | Microsoft Graphics Component Information Disclosure Vulnerability |
| CVE-2020-0623 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0625 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0626 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0627 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0628 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0629 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0630 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0631 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0632 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0633 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0636 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Jiadong Lu | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2020-0638 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Jiadong Lu | Update Notification Manager Elevation of Privilege Vulnerability |
| CVE-2020-0640 | Yuki Chen of Qihoo 360 Vulcan Team | Internet Explorer Memory Corruption Vulnerability |
| CVE-2020-0641 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2020-0643 | Zhangjie and willJ from cdsrc of Qihoo 360 | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2020-0648 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows RSoP Service Application Elevation of Privilege Vulnerability |
| CVE-2020-0659 | k0shl of Qihoo 360 Vulcan team | Windows Data Sharing Service Elevation of Privilege Vulnerability |
| CVE-2020-0666 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0667 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0679 | zhong_sf of Qihoo 360 Vulcan Team | Windows Function Discovery Service Elevation of Privilege Vulnerability |
| CVE-2020-0680 | zhong_sf of Qihoo 360 Vulcan Team | Windows Function Discovery Service Elevation of Privilege Vulnerability |
| CVE-2020-0681 | Qihoo 360 Vulcan Team | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2020-0682 | zhong_sf of Qihoo 360 Vulcan Team | Windows Function Discovery Service Elevation of Privilege Vulnerability |
| CVE-2020-0687 | Zhangjie and willJ from cdsrc of Qihoo 360 | Microsoft Graphics Remote Code Execution Vulnerability |
| CVE-2020-0697 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Microsoft Office Elevation of Privilege Vulnerability |
| CVE-2020-0701 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Client License Service Elevation of Privilege Vulnerability |
| CVE-2020-0704 | zhong_sf of Qihoo 360 Vulcan Team | Windows Wireless Network Manager Elevation of Privilege Vulnerability |
| CVE-2020-0707 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows IME Elevation of Privilege Vulnerability |
| CVE-2020-0709 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-0714 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | DirectX Information Disclosure Vulnerability |
| CVE-2020-0730 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2020-0732 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-0734 | Qihoo 360 Vulcan Team | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2020-0735 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0736 | Keqi Hu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows Kernel Information Disclosure Vulnerability |
| CVE-2020-0746 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | Microsoft Graphics Components Information Disclosure Vulnerability |
| CVE-2020-0752 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0763 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Defender Security Center Elevation of Privilege Vulnerability |
| CVE-2020-0770 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows ActiveX Installer Service Elevation of Privilege Vulnerability |
| CVE-2020-0772 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2020-0774 | yangkang3(@dnpushme) of qihoo 360 core security | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-0777 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0780 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Haoran Qin Shefang Zhong of Qihoo 360 Vulcan Team Anonymous researcher | Windows Network List Service Elevation of Privilege Vulnerability |
| CVE-2020-0781 | Shefang Zhong of Qihoo 360 Vulcan Team Anonymous researcher | Windows UPnP Service Elevation of Privilege Vulnerability |
| CVE-2020-0783 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows UPnP Service Elevation of Privilege Vulnerability |
| CVE-2020-0785 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2020-0786 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Xuefeng Li | Windows Tile Object Service Denial of Service Vulnerability |
| CVE-2020-0789 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Xuefeng Li | Visual Studio Extension Installer Service Denial of Service Vulnerability |
| CVE-2020-0790 | pgboy | Microsoft splwow64 Elevation of Privilege Vulnerability |
| CVE-2020-0793 | pgboy( http://weibo.com/pgboy1988) of 360vulcan & Jarvis_1oop of Pinduoduo Security Research Lab | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-0794 | k0shl of Qihoo 360 Vulcan team | Windows Denial of Service Vulnerability |
| CVE-2020-0797 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0800 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0807 | Hossein Lotfi of Trend Micro’s Zero Day Initiative yangkang3(@dnpushme) of qihoo 360 core security Ke Liu of Tencent Security Xuanwu Lab | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-0808 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Provisioning Runtime Elevation of Privilege Vulnerability |
| CVE-2020-0809 | yangkang3 (@dnpushme) of Qihoo 360 core security | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-0817 | Qihoo 360 Vulcan Team | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2020-0819 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows Device Setup Manager Elevation of Privilege Vulnerability |
| CVE-2020-0820 | yangkang3(@dnpushme) of qihoo 360 core security & Ke Liu of Tencent Security Xuanwu Lab | Media Foundation Information Disclosure Vulnerability |
| CVE-2020-0822 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Xuefeng Li | Windows Language Pack Installer Elevation of Privilege Vulnerability |
| CVE-2020-0823 | QixunZhao of Qihoo 360 Vulcan Team via Tianfu Cup 2019 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0824 | Yuki Chen of Qihoo 360 Vulcan Team | Internet Explorer Memory Corruption Vulnerability |
| CVE-2020-0831 | Yuki Chen of Qihoo 360 Vulcan Team via Tianfu Cup 2019 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0832 | Yuki Chen of Qihoo 360 Vulcan Team via Tianfu Cup 2019 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0833 | Yuki Chen of Qihoo 360 Vulcan Team via Tianfu Cup 2019 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0835 | Zhiniang Peng of Qihoo 360 Core security and Fangming Gu | Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability |
| CVE-2020-0839 | pgboy (http://weibo.com/pgboy1988) | Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
| CVE-2020-0841 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Jiadong Lu | Windows Hard Link Elevation of Privilege Vulnerability |
| CVE-2020-0844 | Zhiniang Peng of Qihoo 360 Core security and Fangming Gu | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
| CVE-2020-0847 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-0849 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Hard Link Elevation of Privilege Vulnerability |
| CVE-2020-0854 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Jiadong Lu | Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
| CVE-2020-0857 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Search Indexer Elevation of Privilege Vulnerability |
| CVE-2020-0864 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0865 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0867 | k0shl of Qihoo 360 Vulcan team | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2020-0868 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2020-0869 | bee13oy of Qihoo 360 Vulcan Team | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-0871 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Windows Network Connections Service Information Disclosure Vulnerability |
| CVE-2020-0874 | Wenguang Jiao of Qihoo 360 CoreSecurity | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-0875 | pgboy | Microsoft splwow64 Information Disclosure Vulnerability |
| CVE-2020-0882 | Zhangjie and willJ from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-0883 | Zhangjie and willJ from cdsrc of Qihoo 360 | GDI+ Remote Code Execution Vulnerability |
| CVE-2020-0888 | liuxiaoliang and pjf of IceSword Lab, Qihoo 360 | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-0895 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2020-0896 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Hard Link Elevation of Privilege Vulnerability |
| CVE-2020-0897 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-0898 | Keqi Hu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2020-0900 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Visual Studio Extension Installer Service Elevation of Privilege Vulnerability |
| CVE-2020-0912 | Yuki Chen | Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability |
| CVE-2020-0913 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-0922 | Yuki Chen | Microsoft COM for Windows Remote Code Execution Vulnerability |
| CVE-2020-0934 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Haoran Qin | Windows Elevation of Privilege Vulnerability |
| CVE-2020-0935 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | OneDrive for Windows Elevation of Privilege Vulnerability |
| CVE-2020-0937 | yangkang (@dnpushme) of Qihoo 360 core security | Media Foundation Information Disclosure Vulnerability |
| CVE-2020-0939 | bee13oy of Qihoo 360 Vulcan Team | Media Foundation Information Disclosure Vulnerability |
| CVE-2020-0940 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Push Notification Service Elevation of Privilege Vulnerability |
| CVE-2020-0944 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Jiadong Lu | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
| CVE-2020-0946 | yangkang3 (@dnpushme) of Qihoo 360 core security | Media Foundation Information Disclosure Vulnerability |
| CVE-2020-0952 | Zhangjie and willJ from cdsrc of Qihoo 360 | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-0966 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-0967 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-0969 | Bruno Keith Qixun Zhao of QiHoo 360 Vulcan team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-0982 | Wenguang Jiao of Qihoo 360 CoreSecurity | Microsoft Graphics Component Information Disclosure Vulnerability |
| CVE-2020-0989 | Zhiniang Peng (@edwardzpeng) | Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability |
| CVE-2020-0996 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2020-1000 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1001 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Push Notification Service Elevation of Privilege Vulnerability |
| CVE-2020-1002 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Microsoft Defender Elevation of Privilege Vulnerability |
| CVE-2020-1003 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1006 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Push Notification Service Elevation of Privilege Vulnerability |
| CVE-2020-1010 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2020-1011 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1012 | pgboy | WinINet API Elevation of Privilege Vulnerability |
| CVE-2020-1014 | Shefang Zhong of Qihoo 360 Vulcan Team | Microsoft Windows Update Client Elevation of Privilege Vulnerability |
| CVE-2020-1015 | Yuki Chen of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1016 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Push Notification Service Information Disclosure Vulnerability |
| CVE-2020-1017 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Push Notification Service Elevation of Privilege Vulnerability |
| CVE-2020-1021 | Yuki Chen of Qihoo 360 Vulcan Team | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2020-1035 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1037 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-1038 | Xuefeng Li (@lxf02942370) | Windows Routing Utilities Denial of Service |
| CVE-2020-1054 | bee13oy of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2020-1056 | Yuki Chen of Qihoo 360 Vulcan Team via Tianfu Cup 2019 | Microsoft Edge Elevation of Privilege Vulnerability |
| CVE-2020-1058 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1060 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1061 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Script Runtime Remote Code Execution Vulnerability |
| CVE-2020-1064 | Yuki Chen of Qihoo 360 Vulcan Team | MSHTML Engine Remote Code Execution Vulnerability |
| CVE-2020-1067 | Yuki Chen of Qihoo 360 Vulcan Team | Windows Remote Code Execution Vulnerability |
| CVE-2020-1068 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2020-1079 | Shefang Zhong of Qihoo 360 Vulcan Team | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2020-1085 | Yuki Chen | Windows Function Discovery Service Elevation of Privilege Vulnerability |
| CVE-2020-1086 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Haoran Qin (@Q4n) | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1087 | pgboy (http://weibo.com/pgboy1988) of 360vulcan | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1093 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1094 | Zhiniang Peng (@edwardzpeng) and Xuefeng Li | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-1096 | yangkang(@dnpushme) of qihoo 360 core security | Microsoft Edge PDF Remote Code Execution Vulnerability |
| CVE-2020-1109 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2020-1110 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2020-1120 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
| CVE-2020-1121 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Haoran Qin (@Q4n) | Windows Clipboard Service Elevation of Privilege Vulnerability |
| CVE-2020-1122 | Xuefeng Li (@lxf02942370) | Windows Language Pack Installer Elevation of Privilege Vulnerability |
| CVE-2020-1123 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
| CVE-2020-1124 | k0shl of Qihoo 360 Vulcan team | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1125 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Fangming Gu (@afang5472) | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1130 | Yuki Chen | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1131 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1133 | Yuki Chen | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1134 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1136 | yangkang3 (@dnpushme) of Qihoo 360 core security | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1137 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Push Notification Service Elevation of Privilege Vulnerability |
| CVE-2020-1138 | Shefang Zhong of Qihoo 360 Vulcan Team | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2020-1139 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1140 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-1144 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Fangming Gu (@afang5472) | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1145 | Wenguang Jiao of Qihoo 360 CoreSecurity | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-1146 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Microsoft Store Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1151 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1155 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1156 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Haoran Qin (@Q4n) | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1157 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Haoran Qin (@Q4n) | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1163 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security and Jiadong Lu | Microsoft Windows Defender Elevation of Privilege Vulnerability |
| CVE-2020-1164 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1165 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Clipboard Service Elevation of Privilege Vulnerability |
| CVE-2020-1169 | Shefang Zhong | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1184 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1196 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Haoran Qin (@atQ4n) working with 360 BugCloud | Windows Print Configuration Elevation of Privilege Vulnerability |
| CVE-2020-1199 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Xuefeng Li working with 360 BugCloud | Windows Feedback Hub Elevation of Privilege Vulnerability |
| CVE-2020-1201 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Haoran Qin (@atQ4n) working with 360 BugCloud | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| CVE-2020-1202 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1203 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1209 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Haoran Qin (@atQ4n) working with 360 BugCloud | Windows Network List Service Elevation of Privilege Vulnerability |
| CVE-2020-1211 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Fangming Gu (@afang5472) working with 360 BugCloud | Connected Devices Platform Service Elevation of Privilege Vulnerability |
| CVE-2020-1212 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | OLE Automation Elevation of Privilege Vulnerability |
| CVE-2020-1214 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1215 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1216 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1217 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Haoran Qin | Windows Runtime Information Disclosure Vulnerability |
| CVE-2020-1222 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Microsoft Store Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1230 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1231 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1233 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1244 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Jiadong Lu | Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
| CVE-2020-1248 | yangkang (@dnpushme) of Qihoo 360 core security | GDI+ Remote Code Execution Vulnerability |
| CVE-2020-1257 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1258 | liuxiaoliang and pjf of IceSword Lab , Qihoo 360 | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-1260 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1261 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | Windows Error Reporting Information Disclosure Vulnerability |
| CVE-2020-1264 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1269 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1270 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 & Haoran Qin (@atQ4n) working with 360 BugCloud | Windows WLAN Service Elevation of Privilege Vulnerability |
| CVE-2020-1273 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1274 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1276 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1277 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Haoran Qin (@Q4n) | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2020-1278 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1281 | Yuki Chen of Qihoo 360 Vulcan Team working with 360 BugCloud | Windows OLE Remote Code Execution Vulnerability |
| CVE-2020-1282 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1283 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Jiadong Lu | Windows Denial of Service Vulnerability |
| CVE-2020-1293 | Yuki Chen of Qihoo 360 Vulcan Team | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| CVE-2020-1304 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1305 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security and Fangming Gu (@afang5472) | Windows State Repository Service Elevation of Privilege Vulnerability |
| CVE-2020-1306 | Shefang Zhong of Qihoo 360 Vulcan Team working with 360 BugCloud | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1307 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Jiadong Lu | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1308 | liuxiaoliang and pjf | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-1309 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core Security & Jiadong Lu | Microsoft Store Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1312 | Zhiniang Peng (@edwardzpeng) of Qihoo 360 Core security & Xuefeng Li | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2020-1336 | Yuki Chen | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1339 | yangkang (@dnpushme) | Windows Media Remote Code Execution Vulnerability |
| CVE-2020-1344 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2020-1347 | Zhiniang Peng (@edwardzpeng) and Fangming Gu | Windows Storage Services Elevation of Privilege Vulnerability |
| CVE-2020-1348 | yangkang3 (@dnpushme) of Qihoo 360 core security | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-1352 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows USO Core Worker Elevation of Privilege Vulnerability |
| CVE-2020-1354 | Yuki Chen | Windows UPnP Device Host Elevation of Privilege Vulnerability |
| CVE-2020-1356 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows iSCSI Target Service Elevation of Privilege Vulnerability |
| CVE-2020-1357 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows System Events Broker Elevation of Privilege Vulnerability |
| CVE-2020-1358 | pgboy | Windows Resource Policy Information Disclosure Vulnerability |
| CVE-2020-1360 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows Profile Service Elevation of Privilege Vulnerability |
| CVE-2020-1361 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows WalletService Information Disclosure Vulnerability |
| CVE-2020-1362 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2020-1364 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows WalletService Denial of Service Vulnerability |
| CVE-2020-1365 | Yuki Chen | Windows Event Logging Service Elevation of Privilege Vulnerability |
| CVE-2020-1366 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Print Workflow Service Elevation of Privilege Vulnerability |
| CVE-2020-1371 | Yuki Chen | Windows Event Logging Service Elevation of Privilege Vulnerability |
| CVE-2020-1372 | k0shl | Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
| CVE-2020-1373 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2020-1375 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu (@abcd23293997) | Windows COM Server Elevation of Privilege Vulnerability |
| CVE-2020-1376 | Yuki Chen | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1379 | yangkang3 (@dnpushme) | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1383 | Yuki Chen | Windows RRAS Service Information Disclosure Vulnerability |
| CVE-2020-1388 | Yuki Chen | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1389 | Yuki Chen | Windows Kernel Information Disclosure Vulnerability |
| CVE-2020-1390 | Yuki Chen | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2020-1392 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1393 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows Diagnostics Hub Elevation of Privilege Vulnerability |
| CVE-2020-1394 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Elevation of Privilege Vulnerability |
| CVE-2020-1399 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1403 | Yuki Chen | VBScript Remote Code Execution Vulnerability |
| CVE-2020-1404 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1405 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
| CVE-2020-1406 | Yuki Chen | Windows Network List Service Elevation of Privilege Vulnerability |
| CVE-2020-1408 | Zhangjie and willJ | Microsoft Graphics Remote Code Execution Vulnerability |
| CVE-2020-1411 | Yuki Chen | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-1419 | Yuki Chen | Windows Kernel Information Disclosure Vulnerability |
| CVE-2020-1424 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu (@abcd23293997) | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2020-1427 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2020-1430 | Yuki Chen | Windows UPnP Device Host Elevation of Privilege Vulnerability |
| CVE-2020-1433 | Zhangjie and willJ | Microsoft Edge PDF Information Disclosure Vulnerability |
| CVE-2020-1435 | yangkang (@dnpushme) | GDI+ Remote Code Execution Vulnerability |
| CVE-2020-1437 | Yuki Chen | Windows Network Location Awareness Service Elevation of Privilege Vulnerability |
| CVE-2020-1440 | Steven Seeley (mr_me) of Source Incite | Microsoft SharePoint Server Tampering Vulnerability |
| CVE-2020-1441 | Zhiniang Peng (@edwardzpeng) & Haoran Qin (@Q4n) | Windows Spatial Data Service Elevation of Privilege Vulnerability |
| CVE-2020-1461 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Microsoft Defender Elevation of Privilege Vulnerability |
| CVE-2020-1465 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Microsoft OneDrive Elevation of Privilege Vulnerability |
| CVE-2020-1468 | Zhangjie and willJ | Windows GDI Information Disclosure Vulnerability |
| CVE-2020-1472 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li (@lxf02942370) | Netlogon Elevation of Privilege Vulnerability |
| CVE-2020-1474 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Image Acquisition Service Information Disclosure Vulnerability |
| CVE-2020-1475 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2020-1477 | yangkang (@dnpushme) | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1478 | yangkang (@dnpushme) | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1479 | liuxiaoliang and pjf | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-1484 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Work Folders Service Elevation of Privilege Vulnerability |
| CVE-2020-1485 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows Image Acquisition Service Information Disclosure Vulnerability |
| CVE-2020-1491 | Yuki Chen | Windows Function Discovery Service Elevation of Privilege Vulnerability |
| CVE-2020-1506 | pgboy (http://weibo.com/pgboy1988) | Windows Start-Up Application Elevation of Privilege Vulnerability |
| CVE-2020-1508 | yangkang (@dnpushme) | Windows Media Audio Decoder Remote Code Execution Vulnerability |
| CVE-2020-1511 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
| CVE-2020-1512 | Zhiniang Peng (@edwardzpeng) & Haoran Qin(@atQ4n) | Windows State Repository Service Information Disclosure Vulnerability |
| CVE-2020-1516 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Work Folders Service Elevation of Privilege Vulnerability |
| CVE-2020-1517 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2020-1518 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2020-1519 | Yuki Chen | Windows UPnP Device Host Elevation of Privilege Vulnerability |
| CVE-2020-1521 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Speech Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1522 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Speech Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1523 | Steven Seeley (mr_me) of Source Incite | Microsoft SharePoint Server Tampering Vulnerability |
| CVE-2020-1524 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Speech Shell Components Elevation of Privilege Vulnerability |
| CVE-2020-1526 | pgboy | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2020-1527 | pgboy | Windows Custom Protocol Engine Elevation of Privilege Vulnerability |
| CVE-2020-1528 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Radio Manager API Elevation of Privilege Vulnerability |
| CVE-2020-1529 | Hillstone Network Neuron Security Team (https://www.hillstonenet.com.cn/) – Zhang WangJunJie and He YiSheng (https://www.weibo.com/234391451) | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2020-1534 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-1535 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1536 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1538 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows UPnP Device Host Elevation of Privilege Vulnerability |
| CVE-2020-1539 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1540 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1541 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1542 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1543 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1544 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1545 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1546 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1547 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1548 | Zhiniang Peng (@edwardzpeng) & Haoran Qin | Windows WaasMedic Service Information Disclosure Vulnerability |
| CVE-2020-1549 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows CDP User Components Elevation of Privilege Vulnerability |
| CVE-2020-1550 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows CDP User Components Elevation of Privilege Vulnerability |
| CVE-2020-1551 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-1552 | Zhiniang Peng (@edwardzpeng) & Jiadong Lu | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-1554 | yangkang3 (@dnpushme) | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1559 | pgboy | Windows Storage Services Elevation of Privilege Vulnerability |
| CVE-2020-1567 | Yuki Chen | MSHTML Engine Remote Code Execution Vulnerability |
| CVE-2020-1579 | Yuki Chen | Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability |
| CVE-2020-1584 | pgboy | Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
| CVE-2020-1593 | yangkang (@dnpushme) | Windows Media Audio Decoder Remote Code Execution Vulnerability |
| CVE-2020-1598 | Yuki Chen | Windows UPnP Service Elevation of Privilege Vulnerability |
| CVE-2020-16851 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | OneDrive for Windows Elevation of Privilege Vulnerability |
| CVE-2020-16852 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | OneDrive for Windows Elevation of Privilege Vulnerability |
| CVE-2020-16853 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | OneDrive for Windows Elevation of Privilege Vulnerability |
| CVE-2020-16863 | VictorV (Tang Tianwen) | Windows Remote Desktop Service Denial of Service Vulnerability |
| CVE-2020-16875 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2020-16876 | Yuki Chen | Windows Application Compatibility Client Library Elevation of Privilege Vulnerability |
| CVE-2020-16879 | Zhiniang Peng (@edwardzpeng) and Xuefeng Li | Projected Filesystem Information Disclosure Vulnerability |
| CVE-2020-16887 | Yuki Chen | Windows Network Connections Service Elevation of Privilege Vulnerability |
| CVE-2020-16891 | HongZhenhao of IceSword Lab | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2020-16896 | VictorV (Tang Tianwen) | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2020-16900 | Xuefeng Li (@lxf02942370) & Zhiniang Peng (@edwardzpeng | Windows Event System Elevation of Privilege Vulnerability |
| CVE-2020-16905 | Yuki Chen | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2020-16912 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16914 | Zhangjie and willJ | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2020-16918 | Keqi Hu | Base3D Remote Code Execution Vulnerability |
| CVE-2020-16923 | Zhangjie and willJ | Microsoft Graphics Components Remote Code Execution Vulnerability |
| CVE-2020-16927 | VictorV (Tang Tianwen) | Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
| CVE-2020-16936 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16952 | Steven Seeley (mr_me) | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2020-16958 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16959 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16960 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16961 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16962 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16963 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16964 | Yuki Chen | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2020-16972 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16973 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16974 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16975 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16976 | Yuki Chen | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-16979 | Steven Seeley (mr_me) of Source Incite | Microsoft SharePoint Information Disclosure Vulnerability |
| CVE-2020-16980 | Xuefeng Li (@lxf02942370) & Zhiniang Peng (@edwardzpeng | Windows iSCSI Target Service Elevation of Privilege Vulnerability |
| CVE-2020-16997 | VictorV (Tang Tianwen) | Remote Desktop Protocol Server Information Disclosure Vulnerability |
| CVE-2020-16998 | liuxiaoliang and pjf | DirectX Elevation of Privilege Vulnerability |
| CVE-2020-16999 | k0shl | Windows WalletService Information Disclosure Vulnerability |
| CVE-2020-17017 | Steven Seeley (mr_me) | Microsoft SharePoint Information Disclosure Vulnerability |
| CVE-2020-17025 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17026 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17027 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17028 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17031 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17032 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17033 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17034 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17037 | k0shl | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2020-17044 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17055 | Yuki Chen | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-17068 | yangkang (@dnpushme) | Windows GDI+ Remote Code Execution Vulnerability |
| CVE-2020-17070 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows Update Medic Service Elevation of Privilege Vulnerability |
| CVE-2020-17073 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2020-17074 | Zhiniang Peng (@edwardzpeng) & Xuefeng Li | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2020-17075 | Zhiniang Peng (@edwardzpeng & Xuefeng Li (@lxf02942370) | Windows USO Core Worker Elevation of Privilege Vulnerability |
| CVE-2020-17076 | Zhiniang Peng (@edwardzpeng) and Xuefeng Li | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2020-17077 | Zhiniang Peng (@edwardzpeng) and Fangming Gu (@afang5472) | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2020-17083 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2020-17084 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2020-17085 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Server Denial of Service Vulnerability |
| CVE-2020-17089 | Steven Seeley (mr_me) and Yuhao Weng (@cjm00nw) | Microsoft SharePoint Elevation of Privilege Vulnerability |
| CVE-2020-17117 | Steven Seeley (mr_me) | Microsoft Exchange Remote Code Execution Vulnerability |
| CVE-2020-17124 | Zhangjie and willJ | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2020-17137 | k0shl | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2020-17140 | k0shl | Windows SMB Information Disclosure Vulnerability |
| CVE-2020-17141 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Remote Code Execution Vulnerability |
| CVE-2020-17143 | Steven Seeley (mr_me) of Source Incite | Microsoft Exchange Information Disclosure Vulnerability |
2019年 （获得162个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| CVE-2019-0567 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0578 | Steven Seeley (mr_me) of Source Incite | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0591 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0592 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0605 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0606 | Yuki Chen of Qihoo 360 Vulcan Team | Internet Explorer Memory Corruption Vulnerability |
| CVE-2019-0610 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0611 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0620 | HongZhenhao of IceSword Lab, Qihoo 360 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2019-0639 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0648 | Zhiyi Zhang and Zhunki with 360 ESG Codesafe Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2019-0649 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Elevation of Privileged Vulnerability |
| CVE-2019-0651 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0652 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0655 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0656 | bee13oy of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2019-0658 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2019-0666 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2019-0667 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2019-0669 | Yangkang of 360CoreSec | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2019-0680 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0686 | n1nty and pr0mise @ 360 A-TEAM | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2019-0720 | HongZhenhao of IceSword Lab, Qihoo 360 | Hyper-V Remote Code Execution Vulnerability |
| CVE-2019-0723 | VictorV (Tang Tianwen) of Qihoo 360 Vulcan Team | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2019-0724 | n1nty and pr0mise @ 360 A-TEAM | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2019-0753 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0756 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0769 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0770 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0771 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0772 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2019-0773 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0790 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0791 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0792 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0793 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0794 | Yuki Chen of Qihoo 360 Vulcan Team | OLE Automation Remote Code Execution Vulnerability |
| CVE-2019-0795 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-0806 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0810 | Liu Long of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0814 | zhong_sf of Qihoo 360 Vulcan Team | Win32k Information Disclosure Vulnerability |
| CVE-2019-0829 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0835 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Scripting Engine Information Disclosure Vulnerability |
| CVE-2019-0842 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2019-0861 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0862 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0864 | Keqi Hu and zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | .NET Framework Denial of Service Vulnerability |
| CVE-2019-0904 | Keqi Hu and zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0905 | Keqi Hu and zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0907 | Keqi Hu and zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Jet Database Engine Remote Code Execution Vulnerability |
| CVE-2019-0911 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0912 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0913 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0914 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0915 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0916 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0917 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0918 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0924 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0925 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0926 | Liu Long of Qihoo 360 Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2019-0927 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0931 | k0shl of Qihoo 360 Vulcan Team | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-0933 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0945 | Keqi Hu and Zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
| CVE-2019-0946 | Keqi Hu and Zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
| CVE-2019-0983 | k0shl of Qihoo 360 Vulcan Team | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-0984 | pgboy | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2019-0989 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0990 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0991 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0992 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-0998 | k0shl of Qihoo 360 Vulcan Team | Windows Storage Service Elevation of Privilege Vulnerability |
| CVE-2019-1001 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1002 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1004 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1005 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1007 | pgboy of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1017 | pgboy of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2019-1021 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1022 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1026 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1027 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1028 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1051 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1052 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1055 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1056 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1057 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-1059 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1060 | Yuki Chen of Qihoo 360 Vulcan Team | MS XML Remote Code Execution Vulnerability |
| CVE-2019-1062 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1074 | k0shl of Qihoo 360 Vulcan team | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2019-1085 | zhong_sf of Qihoo 360 Vulcan Team | Windows WLAN Service Elevation of Privilege Vulnerability |
| CVE-2019-1086 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1087 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1088 | zhong_sf of Qihoo 360 Vulcan Team | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2019-1090 | zhong_sf of Qihoo 360 Vulcan Team | Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
| CVE-2019-1091 | zhong_sf of Qihoo 360 Vulcan Team | Microsoft unistore.dll Information Disclosure Vulnerability |
| CVE-2019-1103 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1106 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1107 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1138 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1139 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1140 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1141 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1150 | Keqi Hu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd | Microsoft Graphics Remote Code Execution Vulnerability |
| CVE-2019-1168 | zhong_sf of Qihoo 360 Vulcan Team | Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability |
| CVE-2019-1173 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1174 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1175 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1177 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1178 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1179 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1180 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1186 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1193 | zhong_sf of Qihoo 360 Vulcan Team | Microsoft Browser Memory Corruption Vulnerability |
| CVE-2019-1195 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1196 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1197 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1198 | zhong_sf of Qihoo 360 Vulcan Team | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2019-1214 | bee13oy of Qihoo 360 Vulcan Team | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2019-1221 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1227 | pgboy of Qihoo 360 Vulcan Team | Windows Kernel Information Disclosure Vulnerability |
| CVE-2019-1230 | VictorV from 360 Security, Vulcan Team | Hyper-V Information Disclosure Vulnerability |
| CVE-2019-1232 | pgboy of Qihoo 360 Vulcan Team | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
| CVE-2019-1236 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2019-1237 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1238 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2019-1239 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2019-1271 | Keqi Hu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows Media Elevation of Privilege Vulnerability |
| CVE-2019-1272 | k0shl of Qihoo 360 Vulcan team | Windows Data Sharing Service Elevation of Privilege Vulnerability |
| CVE-2019-1278 | zhong_sf of Qihoo 360 Vulcan Team | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1289 | k0shl of Qihoo 360 Vulcan team | Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
| CVE-2019-1292 | Zhiniang Peng of Qihoo 360 Core security and Fangming Gu | Windows Elevation of Privilege Vulnerability |
| CVE-2019-1307 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1308 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1309 | HongZhenhao of IceSword Lab, Qihoo 360 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2019-1320 | pgboy of Qihoo 360 Vulcan Team | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2019-1321 | k0shl of Qihoo 360 Vulcan team | Microsoft Windows CloudStore Elevation of Privilege Vulnerability |
| CVE-2019-1323 | pgboy of Qihoo 360 Vulcan Team | Microsoft Windows Update Client Elevation of Privilege Vulnerability |
| CVE-2019-1335 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1336 | pgboy of Qihoo 360 Vulcan Team | Microsoft Windows Update Client Elevation of Privilege Vulnerability |
| CVE-2019-1337 | pgboy of Qihoo 360 Vulcan Team | Windows Update Client Information Disclosure Vulnerability |
| CVE-2019-1340 | Zhiniang Peng of Qihoo 360 Core security and Fangming Gu | Microsoft Windows Elevation of Privilege Vulnerability |
| CVE-2019-1366 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1383 | k0shl of Qihoo 360 Vulcan team | Windows Data Sharing Service Elevation of Privilege Vulnerability |
| CVE-2019-1390 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
| CVE-2019-1426 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-1437 | Keqi Hu and Zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2019-1438 | bee13oy of Qihoo 360 Vulcan Team | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2019-1439 | Keqi Hu and Zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows GDI Information Disclosure Vulnerability |
| CVE-2019-1464 | Zhangjie and willJ from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2019-1465 | yangkang @dnpushme of qihoo 360 core security | Windows GDI Information Disclosure Vulnerability |
| CVE-2019-1472 | zhong_sf of Qihoo 360 Vulcan Team | Windows Kernel Information Disclosure Vulnerability |
| CVE-2019-1474 | Zhiniang Peng of Qihoo 360 Core security and Fangming Gu | Windows Kernel Information Disclosure Vulnerability |
| CVE-2019-1484 | Yuki Chen of Qihoo 360 Vulcan Team | Windows OLE Remote Code Execution Vulnerability |
| CVE-2019-1485 | Yuki Chen of Qihoo 360 Vulcan Team | VBScript Remote Code Execution Vulnerability |
2018年（获得73个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| ADV180018 | Microsoft would like to thank Raoul Strackx, Jo Van Bulck, and Frank Piessens of imec-DistriNet, KU Leuven; Marina Minkin and Mark Silberstein of Technion; Ofir Weisse, Daniel Genkin, Baris Kasikci, and Thomas F. Wenisch of University of Michigan; Yuval Yarom, University of Adelaide and Data61; Lei Shi of Qihoo360 CERT; Leibo Liu, Ao Luo, Bowei Zhang, and Guanhua Li of Tsinghua University for reporting this and working with us on coordinated disclosure. | Microsoft Guidance to mitigate L1TF variant |
| CVE-2018-0756 | ZhangSen of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2018-0757 | ZhangSen of Qihoo 360 Vulcan Team | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0768 | Wei of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0773 | Wei of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0798 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0801 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0804 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0805 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0806 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0807 | bee13oy of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0812 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0817 | Li Qi(@leeqwind) of Qihoo 360 | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2018-0829 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0830 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0834 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0842 | ZhangSen of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2018-0845 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0848 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0849 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0862 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0874 | bo13oy of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0887 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0892 | Liu Long of Qihoo 360Vulcan Team Shenrong Liu – Tencent ZhanluLab |
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability |
| CVE-2018-0904 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0920 | Yangkang (@dnpushme) &Wanglu of Qihoo360 CoreSecurity(@360CoreSec) | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2018-0933 | Wei of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0951 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0954 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0955 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0960 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2018-0981 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0987 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2018-0988 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0989 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2018-0990 | Wei of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0991 | Wei of Qihoo 360 Vulcan Team | Internet Explorer Memory Corruption Vulnerability |
| CVE-2018-0993 | Wei of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0994 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-0997 | Yuki Chen of Qihoo 360 Vulcan Team | Internet Explorer Memory Corruption Vulnerability |
| CVE-2018-1000 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-1004 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2018-1011 | Steven Seeley (mr_me) of Source Incite working with Trend Micro’s Zero Day Initiative | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2018-1022 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8114 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8122 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8157 | Ying Xinlei of IceSword Lab, Qihoo 360 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2018-8158 | Ying Xinlei of IceSword Lab , Qihoo 360 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2018-8169 | Qihoo 360 Vulcan Team | HIDParser Elevation of Privilege Vulnerability |
| CVE-2018-8248 | Ying Xinlei of IceSword Lab, Qihoo 360 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2018-8297 | Liu Long of Qihoo 360 Vulcan Team | Microsoft Edge based on Edge HTML Information Disclosure Vulnerability |
| CVE-2018-8367 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8375 | Ying Xinlei of IceSword Lab, Qihoo 360 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2018-8376 | yangkang(@dnpushme) & Jinquan(@jq0904) & Wanglu of Qihoo360 CoreSecurity(@360CoreSec) | Microsoft PowerPoint Remote Code Execution Vulnerability |
| CVE-2018-8379 | Yangkang(@dnpushme) of Qihoo360 CoreSecurity(@360CoreSec) | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2018-8382 | Ying Xinlei of IceSword Lab, Qihoo 360 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2018-8391 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8399 | bee13oy of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2018-8407 | Keqi Hu (胡可奇) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd. | Windows Remote Procedure Call Information Disclosure Vulnerability |
| CVE-2018-8423 | Steven Seeley (mr_me) of Source Incite | Microsoft JET Database Engine Remote Code Execution Vulnerability |
| CVE-2018-8456 | Qixun Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8467 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8503 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8539 | Jinquan of 360CoreSec | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2018-8542 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8544 | Yuki Chen of Qihoo 360 Vulcan Team | Windows VBScript Engine Remote Code Execution Vulnerability |
| CVE-2018-8556 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8557 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8583 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8618 | Yuki Chen of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8624 | Qixun Zhao of Qihoo 360 Vulcan Team | Chakra Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8627 | Yangkang(@dnpushme) & Jinquan(@jq0904) of Qihoo360 CoreSecurity(@360CoreSec) | Microsoft Excel Information Disclosure Vulnerability |
2017年（获得69个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| CVE-2017-0006 | Yangkang & Liyadong & Wanglu of 360 QEX Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-0024 | pgboy and zhong_sf of Qihoo 360 Vulcan Team working with POC/PwnFest | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0026 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0032 | Qixun Zhao of Qihoo 360 Skyeye Labs | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-0052 | Yangkang & Liyadong & Wanglu of 360 QEX Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-0077 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Dxgkrnl.sys Elevation of Privilege Vulnerability |
| CVE-2017-0078 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0079 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0080 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0081 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0082 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0156 | pgboy and zhong_sf of Qihoo 360vulcan team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0188 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Information Disclosure Vulnerability |
| CVE-2017-0189 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-0221 | Liu Long of Qihoo 360 Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-0227 | Liu Long of Qihoo 360 Vulcan Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2017-0228 | Yuki Chen of Qihoo 360 Vulcan team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-0236 | Yuki Chen of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-0238 | Yuki Chen of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-0254 | Yangkang(@dnpushme) & Liyadong & Wanglu of of 360 QEX Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-0266 | Qixun Zhao www.weibo.com/babyboaes Qihoo 360 Vulcan Team http://www.360.cn/ | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-0296 | pgboy and zhong_sf of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Windows TDX Elevation of Privilege Vulnerability |
| CVE-2017-11788 | Lei Shi of Qihoo 360 Inc | Windows Search Denial of Service Vulnerability |
| CVE-2017-11803 | Liu Long of Qihoo 360Vulcan Team | Microsoft Edge based on Edge HTML Information Disclosure Vulnerability |
| CVE-2017-11826 | Yang Kang, Ding Maoyin and Song Shenlei of Qihoo 360 Core Security (@360CoreSec) | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2017-11837 | Wei of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-11843 | Wei of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-11846 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-11849 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-11850 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Microsoft Graphics Component Information Disclosure Vulnerability |
| CVE-2017-11887 | Yuki Chen of Qihoo 360 Vulcan Team | Internet Explorer Information Disclosure Vulnerability |
| CVE-2017-11895 | Qixan Zhao of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-11913 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-11919 | Wei of Qihoo 360 Vulcan Team | Scripting Engine Information Disclosure Vulnerability |
| CVE-2017-8467 | GuoPengfei from 360 Codesafe Team working with Trend Micro’s Zero Day Initiative (ZDI) | Win32k Elevation of Privilege Vulnerability |
| CVE-2017-8470 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8474 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8476 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8482 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8486 | pgboy and zhong_sf of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Win32k Information Disclosure Vulnerability |
| CVE-2017-8490 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8501 | Yangkang (@dnpushme) & Liyadong & Wanglu of Qihoo 360 Qex Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-8549 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-8553 | pgboy and zhong_sf of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8554 | 360 Security working with Trend Micro’s Zero Day Initiative (ZDI) | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8575 | pgboy of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Microsoft Graphics Component Information Disclosure Vulnerability |
| CVE-2017-8576 | pgboy and zhong_sf of Qihoo 360 Vulcan Team working with Trend Micro’s Zero Day Initiative (ZDI) | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2017-8590 | pgboy and zong_sf of Qihoo 360 Vulcan Team | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2017-8597 | Liu Long of Qihoo 360Vulcan Team | Microsoft Edge based on Edge HTML Information Disclosure Vulnerability |
| CVE-2017-8605 | Qixun Zhao of Qihoo 360 Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-8617 | Liu Long of Qihoo 360Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-8619 | Yuki Chen of Qihoo 360 Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2017-8631 | Steven Seeley (mr_me) of Offensive Security working with Trend Micro’s Zero Day Initiative | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2017-8662 | Liu Long of Qihoo 360Vulcan Team | Microsoft Edge Information Disclosure Vulnerability |
| CVE-2017-8666 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Win32k Information Disclosure Vulnerability |
| CVE-2017-8676 | Weibo Wang (@ma1fan) of 360 SkyEye Labs | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2017-8677 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows GDI+ Information Disclosure Vulnerability |
| CVE-2017-8678 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8679 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8688 | Weibo Wang (@ma1fan) of 360 Skyeye Labs | Windows GDI Information Disclosure Vulnerability |
| CVE-2017-8689 | pgboy and zhong_sf of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2017-8707 | ZhenhaoHong of Qihoo 360 Marvel Team | Windows Hyper-V Information Disclosure Vulnerability |
| CVE-2017-8709 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8719 | fanxiaocao and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2017-8753 | Yuki Chen of Qihoo 360 Vulcan Team | Scripting Engine Memory Corruption Vulnerability |
| CVE-2017-8757 | Liu Long of Qihoo 360Vulcan Team | Microsoft Edge Memory Corruption Vulnerability |
2016年（获得26个致谢）
| CVE编号 | 致谢360研究团队及个人 | 漏洞详情 |
| CVE-2016-0025 | YangKang and LiYaDong of 360 QEX Team | Microsoft Office Memory Corruption Vulnerability |
| CVE-2016-0154 | Liu Long of the Qihoo 360 Vulcan Team | Microsoft Browser Memory Corruption Vulnerability |
| CVE-2016-0155 | Liu Long of Qihoo 360 | Microsoft Edge Memory Corruption Vulnerability |
| CVE-2016-0173 | Qihoo 360 Vulcan Team, working with Trend Micro’s Zero Day Initiative (ZDI) | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-3218 | zhong_sf and pgboy of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-3250 | zhong_sf and pgboy of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2016-3251 | zhong_sf and pgboy of Qihoo 360 Vulcan Team | Windows GDI Information Disclosure Vulnerability |
| CVE-2016-3252 | fanxiaocao(@TinySec) and pjf of IceSword Lab , Qihoo 360 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2016-3254 | zhong_sf and pgboy of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2016-3266 | pgboy, zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-3270 | pgboy, zhong_sf of Qihoo 360 Vulcan Team | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-3286 | zhong_sf and pgboy of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2016-3290 | Liu Long of Qihoo 360 | Internet Explorer Memory Corruption Vulnerability |
| CVE-2016-3297 | Liu Long of Qihoo 360Vulcan Team | Microsoft Browser Memory Corruption Vulnerability |
| CVE-2016-3311 | pgboy, zhong_sf of Qihoo 360 Vulcan Team | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2016-7198 | Liu Long of Qihoo 360 | Microsoft Browser Memory Corruption Vulnerability |
| CVE-2016-7211 | fanxiaocao (@TinySec), and pjf of IceSword Lab, Qihoo 360 | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-7217 | Liu Long of Qihoo 360 | Media Foundation Memory Corruption Vulnerability |
| CVE-2016-7242 | Qixun Zhao of Qihoo 360 Skyeye Labs | Scripting Engine Memory Corruption Vulnerability |
| CVE-2016-7260 | fanxiaocao and pjf of IceSword Lab, Qihoo 360 | Win32k Elevation of Privilege Vulnerability |
| CVE-2016-7275 | Weibo Wang of Qihoo 360 SkyEye Lab | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2016-7296 | Linan Hao of Qihoo 360 Vulcan Team working with POC/PwnFest | Scripting Engine Memory Corruption Vulnerability |