November 2020 Patch Tuesday: Microsoft fixes actively exploited Windows Kernel flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-17040 | Windows Hyper-V Security Feature Bypass Vulnerability | 6.5 | 3% | ||
| CVE-2020-17051 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | 11% | ||
| CVE-2020-17084 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.5 | 4% | ||
| CVE-2020-17087 | Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087) | 7.8 | 5% | KEV | KEV |
| CVE-2020-26950 | In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition | 8.8 | 42% | PoC ×2 |
From the original article
3 min read at helpnetsecurity.com
Microsoft has plugged 112 security holes, including an actively exploited one Adobe has delivered security updates for Adobe Reader Mobile and Adobe Connect Intel has dropped a huge stack of security advisories and patches
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.