Vulnerabilitycritical

‘Wormable’ Flaw Leads July Microsoft Patches

Krebs on SecurityJul 15, 2020 · 00:00 UTC (Jul 15, 2020)3 min read3

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-1350 CVE-2020-1410 CVE-2020-1421 CVE-2020-1435 CVE-2020-1436 CVE-2020-1463

Tags: cve-2020-1350 cve-2020-1410 cve-2020-1421 cve-2020-1435 cve-2020-1436 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1350	Wormable Unauthenticated RCE in Microsoft Windows DNS Server	10.0	97%	KEV	Jul 14, 2020 KEV Nov 3, 2021
CVE-2020-1421 +4 related CVEs CVE-2020-1436 CVE-2020-1435 CVE-2020-1410 CVE-2020-1463	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who…	8.8 group max	75%		Jul 14, 2020

From the original article

3 min read at krebsonsecurity.com

Microsoft today released updates to plug a whopping 123 security holes in Windows and related software, including fixes for a critical, “wormable” flaw in Windows Server versions that Microsoft says is likely to be exploited soon. While this particular weakness mainly affects enterprises, July’s care package from Redmond has a little something for everyone.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.