Threat Source newsletter for Aug. 13, 2020

Summary: Microsoft's August 2020 Patch Tuesday disclosed 120 vulnerabilities across its products, 16 of them rated critical, including one Microsoft says is being exploited in the wild. Cisco also warned users to update multiple lines of switches and routers and its AnyConnect VPN client for Windows, which has a DLL hijacking bug that could let an attacker with system credentials execute code at system-level privileges.
What's compelling: One of the 120 Microsoft bugs was already being exploited before a patch existed, and the Media Foundation flaws (CVE-2020-1379, CVE-2020-1477, CVE-2020-1492, CVE-2020-1525, CVE-2020-1554) trigger from nothing more than opening a crafted document or web page.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-1379 CVE-2020-1477 CVE-2020-1492 CVE-2020-1525 CVE-2020-1554
Related: Microsoft Patch Tuesday for Aug. 2020 — Snort rules and prominent vulnerabilities Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026