Microsoft Releases Windows Security Updates For Critical Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-15999 | Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999) | 9.6 | 64% | KEVPoC ×2 | KEV |
| CVE-2020-17040 | Windows Hyper-V Security Feature Bypass Vulnerability | 6.5 | 3% | ||
| CVE-2020-17051 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | 11% | ||
CVE-2020-17053+1 related CVE | Internet Explorer Memory Corruption Vulnerability | 7.5 | 3% | ||
| CVE-2020-17084 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.5 | 4% | ||
| CVE-2020-17087 | Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087) | 7.8 | 5% | KEV | KEV |
| CVE-2020-17091 | Microsoft Teams Remote Code Execution Vulnerability | 7.8 | 2% |
From the original article
2 min read at thehackernews.com
Microsoft formally released fixes for 112 newly discovered security vulnerabilities as part of its November 2020 Patch Tuesday , including an actively exploited zero-day flaw disclosed by Google's security team last week. The rollout addresses flaws, 17 of which are rated as Critical, 93 are rated as Important, and two are rated Low in severity, once again bringing the patch count over 110 after a drop last month.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.