KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)

🗓️ 11 Aug 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 231 Views

Multiple vulnerabilities in Microsoft Products (ESU). Malicious users can exploit memory corruption, elevation of privilege, and information disclosure vulnerabilities to execute arbitrary code, gain privileges, and obtain sensitive information. Complete list of vulnerabilities provided

Reporter	Title	Published	Views	Family All 337
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, or delete data with the privileges of a legitimate user.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, or delete data with the privileges of a legitimate user.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Jet Database Engine on Windows operating systems allows a hacker to execute arbitrary code.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Image Acquisition service in Windows operating systems allows a hacker to disclose protected information.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows RRAS routing and remote access service allows a perpetrator to gain unauthorized access to protected information.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Windows operating system’s folder service allows a hacker to increase their privileges.	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the srmsvc.dll library in Windows operating systems, which allows attackers to escalate their privileges	26 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Work Folder Service in Windows operating systems arises from improper handling of file operations, which allows attackers to exploit their privileges.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Jet Database Engine database management system in the Windows operating system, related to errors in object processing in memory, allows a perpetrator to execute arbitrary code.	28 Aug 202000:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1379
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1537
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1383
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1475
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1545
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1579
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1470
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1570
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1536
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1577