Patch Tuesday, Good Riddance 2020 Edition
Summary: Microsoft released its final 2020 security update batch covering 58 vulnerabilities, nine of them rated critical and affecting Exchange Server, SharePoint Server, and Windows 10 and Server 2016 systems. None of the flaws fixed this month appear to be actively exploited or publicly detailed, and Microsoft also issued an advisory on a DNS spoofing weakness in Windows Server 2008 through 2019.
Why it matters: Researcher Oskars Vegeris reported a zero-click Microsoft Teams flaw that let an attacker run code by sending a crafted chat message, which Microsoft fixed in October without assigning a CVE, and he says it was the first of five such Teams flaws he found.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026