July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1147 | XML Markup RCE in Microsoft .NET Framework, SharePoint, and Visual Studio | 7.8 | 96% | KEVPoC ×4 | KEV |
| CVE-2020-1349 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote… | 7.8 | 22% | ||
| CVE-2020-1350 | Wormable Unauthenticated RCE in Microsoft Windows DNS Server | 10.0 | 97% | KEV | KEV |
CVE-2020-1421+1 related CVE | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who… | 8.8 group max | 75% |
From the original article
4 min read at helpnetsecurity.com
On this July 2020 Patch Tuesday, Microsoft has plugged 18 critical and 105 high-severity flaws, Adobe has delivered security updates for ColdFusion, Adobe Genuine Service, Adobe Download Manager, Adobe Media Encoder and Adobe Creative Cloud Desktop Application, and Oracle is set to deliver fixes for 433 vulnerabilities.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.