Microsoft Patch Tuesday (Dec. 2020) — Snort rules and notable vulnerabilities

Summary: Microsoft's December 2020 Patch Tuesday disclosed 58 vulnerabilities across its products, the lowest count since January, including 10 critical flaws and two moderate-severity exploits. Notable entries include a SharePoint remote code execution bug (CVE-2020-17118) with a CVSS score of 8.1, an NTFS remote code execution flaw (CVE-2020-17096) exploitable with SMBv2 access, and an Exchange remote code execution bug (CVE-2020-17117) requiring no user interaction.
Key Takeaway: The Exchange flaw can be exploited without any user interaction, and the NTFS bug only requires SMBv2 access to the target - two conditions most enterprise networks meet by default.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-17096 CVE-2020-17117 CVE-2020-17118
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026