Microsoft Patch Tuesday, August 2020 Edition
Summary: Microsoft released August 2020 updates addressing at least 120 security holes in Windows and supported software, 17 of them rated critical, marking the sixth consecutive month with more than 100 fixes. Two flaws are being actively exploited: CVE-2020-1380, an Internet Explorer weakness that can compromise a system just by browsing to a malicious site, and CVE-2020-1464, a Windows spoofing bug that lets attackers bypass security features and load improperly signed files.
Key Takeaway: CVE-2020-1472 lets an unauthenticated attacker gain administrative access to a Windows domain controller, and ZDI's Dustin Childs notes there is no full fix available - a compromised domain controller hands over the keys to a corporate network.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1048CVE-2020-1337CVE-2020-1380CVE-2020-1464CVE-2020-1472
- Related
- CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2020-1380: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2020-1464: Microsoft Windows Spoofing Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021