Top Exploited Vulnerabilities in 2020 Affect Citrix, Microsoft Products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-0158 | Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls) | — | 100% | KEVRansomware | — KEV |
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2020-0674 | Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 87% | KEVPoC ×4 | KEV |
| CVE-2020-0796 | Unauthenticated RCE in Microsoft SMBv3 (SMBGhost) | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at recordedfuture.com
Editor’s Note *: The following post is an excerpt of a full report. To read the entire analysis,* This analysis focuses on ransomware, exploit kit, phishing attack, or remote access trojan co-occurrences with vulnerabilities from January 1 to December 31, 2020. We analyzed thousands of sources, including code repositories, underground forum postings, and dark web sites.
By Insikt Group® · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.