Vulnerabilitycritical

Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage

Cisco TalosFeb 11, 2020 · 19:31 UTC (Feb 11, 2020)3 min read3 · 2 reads

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-0673 CVE-2020-0674 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713 CVE-2020-0767 CVE-2020-0681 CVE-2020-0734 CVE-2020-0662 CVE-2020-0729 CVE-2020-0738 CVE-2020-0618 CVE-2020-0655 CVE-2020-0657 CVE-2020-0658 CVE-2020-0659 CVE-2020-0660 CVE-2020-0661 CVE-2020-0663 CVE-2020-0665 CVE-2020-0666 CVE-2020-0667 CVE-2020-0668 CVE-2020-0669 CVE-2020-0670 CVE-2020-0671 CVE-2020-0672 CVE-2020-0675 CVE-2020-0676 CVE-2020-0677 CVE-2020-0678 CVE-2020-0679 CVE-2020-0680 CVE-2020-0682 CVE-2020-0683 CVE-2020-0685 CVE-2020-0686 CVE-2020-0688 CVE-2020-0689 CVE-2020-0691 CVE-2020-0692 CVE-2020-0694 CVE-2020-0695 CVE-2020-0696 CVE-2020-0697 CVE-2020-0698 CVE-2020-0701 CVE-2020-0703 CVE-2020-0704 CVE-2020-0705 CVE-2020-0706 CVE-2020-0707 CVE-2020-0708 CVE-2020-0709 CVE-2020-0714 CVE-2020-0715 CVE-2020-0716 CVE-2020-0717 CVE-2020-0719 CVE-2020-0720 CVE-2020-0721 CVE-2020-0722 CVE-2020-0723 CVE-2020-0724 CVE-2020-0725 CVE-2020-0726 CVE-2020-0727 CVE-2020-0728 CVE-2020-0730 CVE-2020-0731 CVE-2020-0732 CVE-2020-0733 CVE-2020-0735 CVE-2020-0736 CVE-2020-0737 CVE-2020-0739 CVE-2020-0740 CVE-2020-0741 CVE-2020-0742 CVE-2020-0743 CVE-2020-0744 CVE-2020-0745 CVE-2020-0746 CVE-2020-0747 CVE-2020-0748 CVE-2020-0749 CVE-2020-0750 CVE-2020-0751 CVE-2020-0752 CVE-2020-0753 CVE-2020-0754 CVE-2020-0755 CVE-2020-0756 CVE-2020-0759 CVE-2020-0766 CVE-2020-0693 CVE-2020-0702

Tags: cve-2020-0673 cve-2020-0674 cve-2020-0710 cve-2020-0711 cve-2020-0712 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-0618	Authenticated deserialization RCE in Microsoft SQL Server Reporting Services	8.8	99%	KEVRansomwarePoC ×2	Feb 11, 2020 KEV Sep 18, 2024
CVE-2020-0729 +74 related CVEs CVE-2020-0734 CVE-2020-0662 CVE-2020-0738 CVE-2020-0655 CVE-2020-0665 CVE-2020-0668 CVE-2020-0708 CVE-2020-0753 CVE-2020-0754 CVE-2020-0670 CVE-2020-0671 CVE-2020-0672+62 more	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who…	8.8 group max	31%		Feb 11, 2020
CVE-2020-0767 +5 related CVEs CVE-2020-0711 CVE-2020-0710 CVE-2020-0712 CVE-2020-0713 CVE-2020-0663	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption…	7.5 group max	18%		Feb 11, 2020
CVE-2020-0674 +2 related CVEs CVE-2020-0673 CVE-2020-0706	Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine	7.5 group max	87%	KEVPoC ×4	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-0683	Local Privilege Escalation in Microsoft Windows Installer (Symbolic Link Handling)	7.8	8%	KEV	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-0688 +1 related CVE CVE-2020-0692	RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys	8.8 group max	100%	KEVRansomwarePoC ×2	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-0693 +1 related CVE CVE-2020-0694	A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…	5.4	2%		Feb 11, 2020
CVE-2020-0695	A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online…	5.4	<1%		Feb 11, 2020
CVE-2020-0696	A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook…	6.5	5%		Feb 11, 2020
CVE-2020-0697	An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability…	7.8	<1%		Feb 11, 2020
CVE-2020-0702	A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass Vulnerability'	6.8	<1%		Feb 11, 2020
CVE-2020-0733	An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.To exploit this…	7.8	<1%		Feb 11, 2020
CVE-2020-0736	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure…	5.5	1%		Feb 11, 2020
CVE-2020-0759	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…	8.8	15%		Feb 11, 2020
CVE-2020-0766	An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory	7.8	<1%		Sep 11, 2020

From the original article

3 min read at blog.talosintelligence.com

Microsoft released its monthly security update today, disclosing vulnerabilities across many of its products and releasing corresponding updates. This month's Patch Tuesday covers 98 vulnerabilities, 12 of which are considered critical and 84 that are considered important. There are also two bugs that were not assigned a severity.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.