Vulnerabilitycritical
Microsoft Fixes Fewer Than 100 Bugs for First Time Since February
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-16898 | A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets | 8.8 group max | 11% | ||
| CVE-2020-16937 | An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory | 4.7 | 3% | ||
| CVE-2020-16947 | A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory | 7.5 | 34% |
From the original article
1 min read at infosecurity-magazine.com
Microsoft has issued its first patch update for eight months fixing fewer than 100 CVEs, although six are related to publicly disclosed bugs and will need prioritizing. October’s Patch Tuesday yesterday addressed 87 vulnerabilities including 11 rated critical. Many experts pointed to CVE-2020-16898 , which has a CVSS score of 9.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.