Vulnerabilitycritical
Microsoft Patch Tuesday for Sept. 2020 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2020-0922+3 related CVEs | A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory | 8.8 group max | 5% | ||
CVE-2020-1057+1 related CVE | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory | 4.2 | 2% | ||
CVE-2020-1332+3 related CVEs | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory | 7.8 | 4% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing more than 120 vulnerabilities across its array of products. Twenty-three of the vulnerabilities are considered “critical" while the vast remainder are ranked as “important.” Users of all Microsoft and Windows products are urged to update their software as soon as possible to avoid possible exploitation of all these bugs.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.