Microsoft Patch Tuesday for June 2020 — Snort rules and prominent vulnerabilities
Summary: Microsoft's June 2020 security update disclosed more than 120 vulnerabilities across its products, none of which had been exploited in the wild at the time of release. The most urgent is CVE-2020-1248, a remote code execution flaw in the Windows Graphics Device Interface rated 8.4 out of 10, alongside two Excel remote code execution bugs (CVE-2020-1225 and CVE-2020-1226), an SMBv1 flaw (CVE-2020-1301), and an Android Word bug (CVE-2020-1223).
Key Takeaway: CVE-2020-1248 requires only that a user open a crafted web page or file, and success hands the attacker full control of the system in the current user's context - a CVSS of 8.4 on a component most users never think about.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1223CVE-2020-1225CVE-2020-1226CVE-2020-1248CVE-2020-1301
- Related
- Microsoft Patch Tuesday, June 2020 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026