Microsoft Issues Patches for 3 Bugs Exploited as Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-0910 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest… | 8.4 | 9% | ||
| CVE-2020-0927 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… | 5.4 | 2% | ||
| CVE-2020-0935 | An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows… | 5.5 | <1% | ||
CVE-2020-1020+2 related CVEs | Out-of-Bounds Write RCE in Microsoft Windows Adobe Font Manager Library | 8.8 group max | 65% | KEV | KEV |
From the original article
3 min read at thehackernews.com
It's April 2020 Patch Tuesday , and during these challenging times of coronavirus pandemic, this month's patch management process would not go easy for many organizations where most of the resources are working remotely.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.