Microsoft Patch Tuesday, October 2020 Edition

Summary: Microsoft's October 2020 Patch Tuesday fixed at least 87 security problems in Windows and programs running on it, 11 of them rated critical. The most severe, CVE-2020-16898 in Windows 10 and Windows Server 2019, carries a CVSS score of 9.8 and could be exploited by sending a malformed data packet, which McAfee dubbed "Bad Neighbor" and called potentially wormable.
What's compelling: McAfee said a proof-of-concept exploit for CVE-2020-16898 was "both extremely simple and perfectly reliable," and six of the patched flaws were publicly disclosed before today, giving attackers a head start on building working exploits.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-16898 CVE-2020-16947
Related: Microsoft Patch Tuesday for Oct. 2020 — Snort rules and prominent vulnerabilities Cyber Risks ·
Threat Brief: Microsoft Vulnerability CVE-2020-16898 Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026