Threat Source newsletter for June 11, 2020
Summary: Microsoft released its monthly security update disclosing more than 120 vulnerabilities across its products, including remote code execution bugs in Word and SMB, none of which had been exploited in the wild at the time. Cisco separately disclosed three critical vulnerabilities in its IOS and IOS XE software and industrial router group, including a command injection flaw allowing arbitrary code execution and a bug that could let a remote attacker obtain an authorization token and run IOx API commands on the device.
Why it matters: More than 120 Microsoft vulnerabilities in a single Patch Tuesday, plus critical Cisco IOS XE flaws that hand an attacker a token and API-level control of industrial routers, put unpatched network and edge devices squarely in the path of remote code execution.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026