Microsoft Patch Tuesday, April 2020 Edition

Summary: Microsoft released updates fixing 113 security vulnerabilities across its Windows operating systems and related software, including at least three flaws being actively exploited and two others publicly detailed before the patch. Nineteen of the fixed weaknesses carried Microsoft's critical rating, and the batch included CVE-2020-1020 in the Adobe Font Manager library, CVE-2020-0938, and CVE-2020-1027 affecting Windows 7 and Windows 10.
What you should know: All three zero-day flaws affect Windows 7, an operating system no longer supported with security updates unless an enterprise is paying for Microsoft's extended security updates program, leaving anyone still running it exposed to flaws attackers are already exploiting.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-0796 CVE-2020-0938 CVE-2020-0968 CVE-2020-1020 CVE-2020-1027
Related: Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage Cyber Risks ·
CVE-2020-1027: Microsoft Windows Kernel Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 23, 2022
CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Feb 10, 2022