VulnerabilitycriticalExploited in the wild

Patch Tuesday: Dangerous Zero

Infosecurity Magazineby Phil MuncasterNov 11, 2020 · 12:00 UTC (Nov 11, 2020)1 min read1

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-17087 CVE-2020-15999 CVE-2020-17016 CVE-2020-17015 CVE-2020-17060 CVE-2020-16979 CVE-2020-17017 CVE-2020-17061

Tags: cve-2020-17087 cve-2020-15999 cve-2020-17016 cve-2020-17015 cve-2020-17060 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-15999	Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999)	9.6	64%	KEVPoC ×2	Nov 3, 2020 KEV Nov 3, 2021
CVE-2020-17016 +4 related CVEs CVE-2020-17060 CVE-2020-17017 CVE-2020-16979 CVE-2020-17015	Microsoft SharePoint Server Spoofing Vulnerability	8.0 group max	3%		Nov 11, 2020
CVE-2020-17061	Microsoft SharePoint Remote Code Execution Vulnerability	8.8	4%		Nov 11, 2020
CVE-2020-17087	Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087)	7.8	5%	KEV	Nov 11, 2020 KEV Nov 3, 2021

From the original article

1 min read at infosecurity-magazine.com

After a brief respite last month, Microsoft hit system administrators with another large patch load this month, issuing fixes for 112 CVEs including one being actively exploited in the wild.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.