Microsoft Patch Tuesday, June 2020 Edition
Summary: Microsoft released patches for at least 129 security holes in Windows and supported software in June 2020, with eleven rated critical, marking the fourth consecutive month of more than 100 fixes. Among them is CVE-2020-1301, a remote code execution bug in SMB built into Windows 7 and Windows Server 2008, which Microsoft stopped supporting with security updates in January 2020.
What's compelling: Proof-of-concept code published that week exploits CVE-2020-0796, a March SMB flaw that does not require the attacker to be authenticated on the target network, leaving unpatched Windows 10 machines used by remote workers exposed.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-0796CVE-2020-1225CVE-2020-1226CVE-2020-1229CVE-2020-1301
- Related
- CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Feb 10, 2022