Vulnerabilitycritical
Microsoft July 2020 Security Updates address 123 vulnerabilities
- CVEs
- CVE-2020-1350CVE-2020-1400CVE-2020-1401CVE-2020-1407CVE-2020-1041CVE-2020-1040CVE-2020-1032CVE-2020-1036CVE-2020-1042CVE-2020-1043CVE-2020-1240CVE-2020-1349CVE-2020-1444CVE-2020-1446CVE-2020-1447CVE-2020-1448CVE-2020-1421CVE-2020-1435CVE-2020-1408CVE-2020-1412CVE-2020-1409CVE-2020-1436CVE-2020-1355
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-1036+4 related CVEs | A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest… | 9.0 | 6% | ||
| CVE-2020-1040 | Guest-to-Host RCE in Microsoft Hyper-V RemoteFX vGPU on Windows Server | 9.0 | 8% | KEV | KEV |
CVE-2020-1240+4 related CVEs | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel… | 8.8 group max | 14% | ||
| CVE-2020-1350 | Wormable Unauthenticated RCE in Microsoft Windows DNS Server | 10.0 | 97% | KEV | KEV |
| CVE-2020-1421 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who… | 8.8 group max | 75% | ||
| CVE-2020-1444 | A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote… | 4.3 | 9% |
From the original article
2 min read at securityaffairs.com
Microsoft July 2020 addressed 123 security flaws across 13 products, including a 17-year-old wormable issue for hijacking Microsoft Windows Server dubbed SigRed. Microsoft July 2020 addressed 123 security vulnerabilities impacting 13 products, none of them has been observed being exploited in attacks in the wild. The July 2020 security release consists of security updates for the following software:
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.