Vulnerabilitycritical
Microsoft Patches 129 CVEs in Another Major Monthly Update
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0922 | A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory | 8.8 | 5% | ||
| CVE-2020-1595 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input | 9.9 group max | 2% | ||
| CVE-2020-16875 | A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments | 8.4 | 46% | PoC |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has fixed 129 CVEs this Patch Tuesday, the seventh month in a row that the number has exceeded 100. The September line-up for system administrators included 23 critical vulnerabilities, mostly affecting Windows OS and browsers, although none have been exploited or publicly disclosed.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.