Google discloses actively exploited Windows zero-day (CVE-2020-17087)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-15999 | Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999) | 9.6 | 64% | KEVPoC ×2 | KEV |
| CVE-2020-17087 | Windows Kernel Buffer Overflow Enables Local Privilege Escalation (CVE-2020-17087) | 7.8 | 5% | KEV | KEV |
From the original article
1 min read at helpnetsecurity.com
Google researchers have made public a Windows kernel zero day vulnerability (CVE-2020-17087) that is being exploited in the wild in tandem with a Google Chrome flaw (CVE-2020-15999) that has been patched on October 20.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.