Microsoft Patch Tuesday for Aug. 2020 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-1492+4 related CVEs | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory | 7.8 group max | 3% | ||
| CVE-2020-1380 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.8 | 24% | KEV | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2020-1555 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) | 8.8 | 5% |
From the original article
2 min read at blog.talosintelligence.com
UPDATE: Additional rules to cover CVE-2020-1472 were published in our recent rule release. Please enable rules 55703 and 55704 for additional coverage. Microsoft released its monthly security update Tuesday, disclosing 120 vulnerabilities across its array of products.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.