Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11935
HistoryAug 11, 2020 - 12:00 a.m.

KLA11935 Multiple vulnerabilities in Microsoft Browsers

2020-08-1100:00:00
Kaspersky Lab
threats.kaspersky.com
85

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.448 Medium

EPSS

Percentile

97.3%

JSON

Detect date:

08/11/2020

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Microsoft Edge (EdgeHTML-based)
Internet Explorer 9
Internet Explorer 11
ChakraCore

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2020-1569
CVE-2020-1568
CVE-2020-1570
CVE-2020-1567
CVE-2020-1380
CVE-2020-1555

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2020-15707.5Critical
CVE-2020-15674.2Warning
CVE-2020-15697.8Critical
CVE-2020-15687.5Critical
CVE-2020-13807.8Critical
CVE-2020-15558.8Critical

KB list:

4571692
4571694
4571729
4571687
4571709
4566782
4571703
4565349
4571736
4571741
4565351

Microsoft official advisories:

References

Related

attackerkb 3
mskb 12
nessus 12
checkpoint_advisories 3
cve 6
mscve 6
prion 6
zdi 1
trendmicroblog 1
cisa_kev 1
thn 4
cisa 1
threatpost 3
securelist 6
krebs 1
openvas 10
qualysblog 2
avleonov 1
kaspersky 1
attackerkb
attackerkb
CVE-2020-1380
2020-08-17 00:00:00
CVE-2021-26419
2021-05-11 00:00:00
CVE-2021-26411
2021-03-11 00:00:00
mskb
mskb
Cumulative security update for Internet Explorer: August 11, 2020
2020-08-11 07:00:00
August 11, 2020—KB4571709 (OS Build 17134.1667)
2020-08-11 07:00:00
August 11, 2020—KB4571736 (Monthly Rollup)
2020-08-11 07:00:00
nessus
nessus
Security Updates for Internet Explorer (August 2020)
2020-08-11 00:00:00
KB4565349: Windows 10 Version 1809 and Windows Server 2019 August 2020 Security Update
2020-08-11 00:00:00
KB4565351: Windows 10 Version 1903 and Windows 10 Version 1909 August 2020 Security Update
2020-08-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-1570)
2020-08-11 00:00:00
Microsoft MSHTML Engine Remote Code Execution (CVE-2020-1567)
2020-08-11 00:00:00
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2020-1380)
2020-08-11 00:00:00
cve
cve
CVE-2020-1555
2020-08-17 19:15:00
CVE-2020-1570
2020-08-17 19:15:00
CVE-2020-1567
2020-08-17 19:15:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2020-08-11 07:00:00
Scripting Engine Memory Corruption Vulnerability
2020-08-11 07:00:00
MSHTML Engine Remote Code Execution Vulnerability
2020-08-11 07:00:00
prion
prion
Remote code execution
2020-08-17 19:15:00
Remote code execution
2020-08-17 19:15:00
Remote code execution
2020-08-17 19:15:00
zdi
zdi
Microsoft Chakra Inline Cache Out-Of-Bounds Read Remote Code Execution Vulnerability
2020-08-14 00:00:00
trendmicroblog
trendmicroblog
This Week in Security News: Trend Micro and Snyk Partner to Fight Open Source Security Flaws and Ransomware Has Gone Corporate
2020-08-28 13:15:25
cisa_kev
cisa_kev
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
2021-11-03 00:00:00
thn
thn
Microsoft Reveals New Innocent Ways Windows Users Can Get Hacked
2020-08-12 12:25:00
North Korea Hackers Using New "Dolphin" Backdoor to Spy on South Korean Targets
2022-11-30 18:30:00
NK Hackers Deploy Browser Exploits on South Korean Sites to Spread Malware
2021-08-18 08:33:00
cisa
cisa
Microsoft Addresses RCE and Spoofing Vulnerabilities Under Active Exploitation
2020-08-11 00:00:00
threatpost
threatpost
InkySquid State Actor Exploiting Known IE Bugs
2021-08-19 20:19:04
Microsoft Out-of-Band Security Update Fixes Windows Remote Access Flaws
2020-08-20 15:39:38
Two 0-Days Under Active Attack, Among 120 Bugs Patched by Microsoft
2020-08-11 21:12:29
securelist
securelist
IT threat evolution Q3 2020
2020-11-20 10:00:58
APT trends report Q3 2020
2020-11-03 10:00:37
Internet Explorer and Windows zero-day exploits used in Operation PowerFall
2020-08-12 07:00:28
krebs
krebs
Microsoft Patch Tuesday, August 2020 Edition
2020-08-11 20:55:02
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4571709)
2020-08-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4566782)
2020-08-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4565349)
2020-08-12 00:00:00
qualysblog
qualysblog
August 2020 Patch Tuesday – 120 Vulnerabilities, 17 Critical, Media Foundation, Windows Codecs, Workstation, Adobe
2020-08-11 19:02:30
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
avleonov
avleonov
Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others
2020-08-30 22:13:56
kaspersky
kaspersky
KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)
2020-08-11 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.448 Medium

EPSS

Percentile

97.3%

JSON
Related for KLA11935
attackerkb3mskb12nessus12checkpoint_advisories3cve6mscve6prion6zdi1trendmicroblog1cisa_kev1thn4cisa1threatpost3securelist6krebs1openvas10qualysblog2avleonov1kaspersky1