Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange

🗓️ 30 Sep 2020 23:46:21Reported by Alexander LeonovType

avleonov🔗 feedproxy.google.com👁 219 Views

Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange. Vulnerabilities turning out to be serious, including Zerologon, an RCE without authentication

Reporter	Title	Published	Views	Family All 2028
zdt	Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution Exploit	17 Sep 202000:00	–	zdt
zdt	Microsoft Spooler Local Privilege Elevation Exploit	17 Sep 202000:00	–	zdt
zdt	Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call Exploit	29 Sep 202000:00	–	zdt
zdt	ZeroLogon - Netlogon Elevation of Privilege Exploit	18 Nov 202000:00	–	zdt
Vulnrichment	CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability	17 Aug 202019:13	–	vulnrichment
Vulnrichment	CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability	11 Sep 202017:09	–	vulnrichment
Vulnrichment	CVE-2020-1589 Windows Kernel Information Disclosure Vulnerability	11 Sep 202017:09	–	vulnrichment
Vulnrichment	CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability	11 Sep 202017:09	–	vulnrichment
Vulnrichment	CVE-2020-16862 Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability	11 Sep 202017:08	–	vulnrichment
Vulnrichment	CVE-2020-16879 Projected Filesystem Information Disclosure Vulnerability	11 Sep 202017:08	–	vulnrichment

30 Sep 2020 23:46Current

9.3High risk

Vulners AI Score9.3

EPSS0.99512