Microsoft Patch Tuesday, August 2020 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1048 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system | 7.8 | 17% | PoC | |
| CVE-2020-1337 | An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system | 7.8 | 14% | PoC ×2 | |
| CVE-2020-1380 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.8 | 24% | KEV | KEV |
| CVE-2020-1464 | File Signature Validation Spoofing in Microsoft Windows | 7.8 | 39% | KEVPoC | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
From the original article
3 min read at krebsonsecurity.comMicrosoft today released updates to plug at least 120 security holes in its Windows operating systems and supported software, including two newly discovered vulnerabilities that are actively being exploited. Yes, good people of the Windows world, it’s time once again to backup and patch up!
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.