Microsoft Patch Tuesday, March 2020 Edition
Summary: Microsoft's March 2020 Patch Tuesday addressed at least 115 security flaws, 26 of them rated critical, with no zero-day bugs and no Adobe patches released the same day. Notable fixes included CVE-2020-0852, a Word flaw exploitable by loading a booby-trapped document in the Outlook preview pane, and CVE-2020-0872, a weakness in Microsoft's own Application Inspector source-code analyzer, while Recorded Future warned that exploit code for the Exchange bug CVE-2020-0688 patched in February was available and being used by nation-state actors.
Why it matters: An unauthenticated attacker sending a crafted packet to an SMBv3 server could exploit the wormable flaw Microsoft disclosed in an evening advisory, and Recorded Future's warning that nation-state actors were already abusing the February Exchange exploit shows how fast patched bugs become weapons.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-0688CVE-2020-0852CVE-2020-0872
- Related
- CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Microsoft Patch Tuesday, February 2020 Edition Cyber Risks ·