Microsoft Patches 120 CVEs Including Two Zero Days
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-1492+4 related CVEs | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory | 7.8 group max | 3% | ||
| CVE-2020-1380 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.8 | 24% | KEV | KEV |
| CVE-2020-1464 | File Signature Validation Spoofing in Microsoft Windows | 7.8 | 39% | KEVPoC | KEV |
From the original article
1 min read at infosecurity-magazine.com
It was another big Patch Tuesday this month with over 100 CVEs fixed by Microsoft, including two being actively exploited in the wild. Of the 120 vulnerabilities addressed this month, 17 were rated critical. Experts agreed that system administrators should focus on the two zero-day bugs.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.