Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Summary: Microsoft's April 2020 Patch Tuesday disclosed 115 vulnerabilities, 19 of them rated critical, with fixes spanning SharePoint, the Windows font library and the Windows kernel. Cisco Talos researcher Jon Munshaw reported that Talos discovered CVE-2020-0939, an information disclosure flaw in Microsoft Media Foundation, and released Snort rules 53489-53492, 53619-53630 and 53652-53655 to cover some of the patched flaws.
Bottom line: Several of the 19 critical bugs, including CVE-2020-0687 in the Windows font library and CVE-2020-0938/CVE-2020-1020 in the Adobe Type Manager Library, can give an attacker complete control of a machine through nothing more than a crafted file or website visit.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-0687 CVE-2020-0760 CVE-2020-0784 CVE-2020-0907 CVE-2020-0929 CVE-2020-0931 CVE-2020-0932 CVE-2020-0938 CVE-2020-0939 CVE-2020-0968 CVE-2020-0969 CVE-2020-0970 CVE-2020-1020
Related: Microsoft Patch Tuesday, April 2020 Edition Cyber Risks ·
CVE-2020-0968: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
CVE-2020-1020: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021