Microsoft Patch Tuesday, Sept. 2020 Edition
Summary: Microsoft released updates for nearly 130 security vulnerabilities in Windows and supported software, with 23 rated as flaws that could let malware seize complete control of Windows computers with little or no user help. September was the seventh consecutive month Microsoft shipped fixes for more than 100 flaws and the fourth straight month above 120, with the critical Exchange Server bug CVE-2020-16875 among the chief enterprise concerns.
Bottom line: Trend Micro's Dustin Childs called the Exchange flaw 'about the worst-case scenario for Exchange servers' and said attackers could exploit it by sending a single booby-trapped email, predicting it will likely be seen in the wild soon after the previously patched Exchange bug CVE-2020-0688 was.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-0604CVE-2020-0688CVE-2020-1210CVE-2020-16875
- Related
- CVE-2019-0604: Microsoft Share Point Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Microsoft Patch Tuesday, February 2020 Edition Cyber Risks ·