September 2020 Patch Tuesday: Microsoft fixes over 110 CVEs again
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-0604 | RCE in Microsoft SharePoint via Application Package Markup Validation Flaw | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0922 | A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory | 8.8 | 5% | ||
| CVE-2020-0951 | A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement | 6.7 | 7% | ||
| CVE-2020-1210 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package | 9.9 | 2% | ||
| CVE-2020-16857 | A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 | 7.1 | 3% | ||
| CVE-2020-16862 | A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected… | 7.1 | 3% | ||
| CVE-2020-16875 | A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments | 8.4 | 46% | PoC |
From the original article
4 min read at helpnetsecurity.com
Microsoft has plugged 129 security holes, including a critical RCE flaw that could be triggered by sending a specially crafted email to an affected Exchange Server installation Adobe has delivered security updates for Adobe Experience Manager, AEM Forms, Framemaker and InDesign SAP has released 10 security notes and updates to six previously released notes
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.