VulnerabilitycriticalExploited in the wild

Patch Tuesday, November 2020 Edition

Krebs on SecurityNov 11, 2020 · 02:35 UTC (Nov 11, 2020)4 min read2 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-17087 CVE-2020-15999 CVE-2020-16875 CVE-2020-17051

Tags: cve-2020-17087 cve-2020-15999 cve-2020-16875 cve-2020-17051 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-15999	Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999)	9.6	64%	KEVPoC ×2	Nov 3, 2020 KEV Nov 3, 2021
CVE-2020-16875	A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments	8.4	46%	PoC	Sep 11, 2020
CVE-2020-17051	Windows Network File System Remote Code Execution Vulnerability	9.8	11%		Nov 11, 2020
CVE-2020-17087	Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087)	7.8	5%	KEV	Nov 11, 2020 KEV Nov 3, 2021

From the original article

4 min read at krebsonsecurity.com

Adobe and Microsoft each issued a bevy of updates today to plug critical security holes in their software. Microsoft’s release includes fixes for 112 separate flaws, including one zero-day vulnerability that is already being exploited to attack Windows users. Microsoft also is taking flak for changing its security advisories and limiting the amount of information disclosed about each bug.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.