Vulnerabilitycritical
Microsoft Patches Just 58 CVEs in Light December Update
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-17132+2 related CVEs | Microsoft Exchange Remote Code Execution Vulnerability | 9.1 group max | 90% | ||
| CVE-2020-17123 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 group max | 4% | ||
| CVE-2020-29075 | Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure… | 6.5 | 8% |
From the original article
2 min read at infosecurity-magazine.com
Microsoft spread some festive cheer among sysadmins this month with a Patch Tuesday only around half as large as most of its updates this year, fixing just 58 CVEs. Of those, nine were rated critical, with CVE-2020-17132 singled out by Recorded Future senior security architect Allan Liska as a priority. “The vulnerability impacts Microsoft Exchange 2013 through 2019 and requires the attacker to be authenticated.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.