April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-0981+2 related CVEs | A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the… | 8.8 group max | 1% | ||
| CVE-2020-0935 | An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows… | 5.5 | <1% | ||
CVE-2020-1020+2 related CVEs | Out-of-Bounds Write RCE in Microsoft Windows Adobe Font Manager Library | 8.8 group max | 65% | KEV | KEV |
| CVE-2020-0968 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 31% | KEVRansomware | KEV |
| CVE-2020-1022 | A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability' | 8.0 | 7% | ||
CVE-2020-3954+1 related CVE | Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation | 6.1 group max | <1% |
From the original article
4 min read at helpnetsecurity.com
For the April 2020 Patch Tuesday, Adobe plugs 5 flaws and Microsoft 113, three of which are currently being exploited by attackers. On this Patch Tuesday, Adobe has released security updates for ColdFusion (2016 and 2018) for all platforms, After Effects (for Windows and macOS), and Digital Editions for Windows. No critical vulnerabilities have been addressed this time.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.