Vulnerabilitycritical
Microsoft Patch Tuesday for Oct. 2020 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-16898+2 related CVEs | A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets | 8.8 group max | 11% | ||
CVE-2020-16952+1 related CVE | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package | 8.6 | 71% | PoC |
From the original article
2 min read at blog.talosintelligence.com
By Jon Munshaw, with contributions from Alex McDonnell and Nick Biasini. Microsoft released its monthly security update Tuesday, disclosing just under 100 vulnerabilities across its array of products. Fourteen of the vulnerabilities are considered “critical" while the vast remainder are ranked as “important.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.