Microsoft Patch Tuesday for Oct. 2020 — Snort rules and prominent vulnerabilities
Summary: Microsoft's October 2020 security update disclosed just under 100 vulnerabilities across its products, 14 of them rated critical and the rest important, covering SharePoint, Azure Sphere and the Windows camera codec. Talos highlighted two SharePoint remote code execution flaws (CVE-2020-16951 and CVE-2020-16952) that let an adversary run arbitrary code in the SharePoint application pool and server farm account, plus two Windows 10 IPv6 flaws (CVE-2020-16899 and CVE-2020-16898) that a remote unauthenticated attacker could use to crash a system or execute code.
Key Takeaway: CVE-2020-16898, which lets an unauthenticated attacker execute code via a crafted IPv6 packet, is rated by Microsoft as more likely to be exploited on the latest Windows release and older versions than its sibling flaw - a reachable, pre-auth path into the newest software you run.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-16891CVE-2020-16898CVE-2020-16899CVE-2020-16951CVE-2020-16952
- Related
- Microsoft Patch Tuesday, October 2020 Edition Cyber Risks ·Threat Brief: Microsoft Vulnerability CVE-2020-16898 Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026