Microsoft Patch Tuesday June 2020: The Bleeding Ghost of SMB

This time, Microsoft addressed 129 vulnerabilities: 11 critical and 118 important. In fact, in the file that I exported from the Microsoft website, I saw 2 more CVEs CVE-2020-1221, CVE-2020-1328 related to Microsoft Dynamics 365 on-premises. But there is no information on them on the Microsoft...

CVE-2020-1206

creationtimestamp| type| source ---|---|--- 2020-06-09 21:32:33+00:00| seen| https://t.me/cKure/849 2020-06-09 22:38:30+00:00| published-proof-of-concept| https://t.me/thehackernews/723 2020-06-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=485 2020-06-12 04:46:18+00:0...

SMBleed: A New Critical Vulnerability Affects Windows SMB Protocol

Cybersecurity researchers today uncovered a new critical vulnerability affecting the Server Message Block SMB protocol that could allow attackers to leak kernel memory remotely, and when combined with a previously disclosed "wormable" bug, the flaw can be exploited to achieve remote code executio...

CVE-2020-1206

CVE-2020-1206 is an information disclosure vulnerability in SMBv3 (Microsoft Server Message Block 3.1.1) that affects the SMBv3 client/server handling of certain requests. The connected documents describe an information disclosure in SMBv3 and note that attackers can chain SMBleed with SMBGhost t...

Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update

Microsoft has released patches for 129 vulnerabilities as part of its June Patch Tuesday updates – the highest number of CVEs ever released by Microsoft in a single month. Within the blockbuster security update, 11 critical remote code-execution flaws were patched in Windows, SharePoint server,...

Exploit for Use of Uninitialized Resource in Microsoft

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 Z...

Exploit for Use of Uninitialized Resource in Microsoft

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 Z...