Microsoft Patch Tuesday for Aug. 2020 — Snort rules and prominent vulnerabilities
Summary: Microsoft's August 2020 security update disclosed 120 vulnerabilities across its products, 16 of them rated critical, including one that Microsoft says is being exploited in the wild. The critical bugs include five in Microsoft Media Foundation (CVE-2020-1379, CVE-2020-1477, CVE-2020-1492, CVE-2020-1525 and CVE-2020-1554) that allow memory corruption and remote code execution when a target opens a crafted document or web page, two similar flaws in the Microsoft Scripting Engine (CVE-2020-1380 and CVE-2020-1555), and a remote code execution vulnerability in Netlogon Remote Protocol (CVE-2020-1472).
Why it matters: One of the 120 flaws is already being exploited in the wild, and CVE-2020-1380 in the Scripting Engine is named as that exploited bug even though no proof-of-concept code is publicly available. CVE-2020-1472 in Netlogon lets a malicious user run a crafted application on a machine connected to the victim network, which is why Microsoft directs users to deploy Domain Controller enforcement mode after patching.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1379CVE-2020-1380CVE-2020-1472CVE-2020-1477CVE-2020-1492CVE-2020-1525CVE-2020-1554CVE-2020-1555
- Related
- Threat Source newsletter for Aug. 13, 2020 Cyber Risks ·Microsoft Patch Tuesday, August 2020 Edition Cyber Risks ·CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021