Cyber Risks · Cisco Talos

Microsoft Patch Tuesday — May 2020: Vulnerability disclosures and Snort coverage

Summary: Microsoft's May 2020 Patch Tuesday disclosed 111 vulnerabilities, 15 of them rated critical, along with 95 rated important and six low- and moderate-severity flaws. Cisco Talos disclosed CVE-2020-0901, a code execution vulnerability in Excel, and released Snort rules 53916-53919, 53924-53933, 53940, 53941, 53950 and 53951 to cover some of the patched flaws.

What you should know: Four of the critical bugs are remote code execution flaws in SharePoint, and CVE-2020-1069 can be triggered by uploading a specially crafted packet to a SharePoint server - no user action required, on a service many organizations expose broadly.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2020-0901CVE-2020-1023CVE-2020-1024CVE-2020-1062CVE-2020-1069CVE-2020-1102CVE-2020-1103
Related