Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-15999 | Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999) | 9.6 | 64% | KEVPoC ×2 | KEV |
| CVE-2020-16009 | Type Confusion in Google Chromium V8 Engine Enables RCE via Crafted HTML Pages | 8.8 | 48% | KEVPoC ×2 | KEV |
| CVE-2020-16010 | Heap Buffer Overflow in Google Chrome for Android Enables Sandbox Escape | 9.6 | 6% | KEV | KEV |
| CVE-2020-17087 | Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087) | 7.8 | 5% | KEV | KEV |
| CVE-2020-27955 | Git LFS 2.12.0 allows Remote Code Execution | 9.8 | 82% | PoC ×5 |
From the original article
5 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, reviews and articles: Git LFS vulnerability allows attackers to compromise targets’ Windows systems (CVE-2020-27955) A critical vulnerability (CVE-2020-27955) in Git Large File Storage (Git LFS), an open source Git extension for versioning large files, allows attackers to achieve remote code execution if the Windows-using victim is tricked into…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.