May 2020 Patch Tuesday: Microsoft fixes 111 flaws, Adobe 36
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1024 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package | 8.8 | 4% | ||
CVE-2020-1118+2 related CVEs | A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges | 8.6 group max | 16% | ||
CVE-2020-1171+1 related CVE | A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project | 8.8 group max | 5% | ||
CVE-2020-9607+1 related CVE | Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an… | 7.8 group max | 5% |
From the original article
4 min read at helpnetsecurity.com
For the May 2020 Patch Tuesday, Microsoft has fixed 111 CVE-numbered flaws and Adobe 36, but none are under active attack. For the third time in the last three months, Microsoft squashed over 100 CVE-numbered bugs. Of the 111 flaws fixed this time, 16 are rated critical and the rest important, but none of them are publicly known or under active attack.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.