Microsoft Releases Windows Security Updates For Critical Flaws

🗓️ 11 Nov 2020 10:09:00Reported by The Hacker NewsType

Microsoft fixes many vulnerabilities in November Patch Tuesday, including a Google zero-day in Windows kernel.

Reporter	Title	Published	Views	Family All 155
ATTACKERKB	CVE-2020-17087 Windows Kernel local privilege escalation 0day	11 Nov 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-15999 Chrome Freetype 0day	3 Nov 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-17091	11 Nov 202000:00	–	attackerkb
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Exchange Server mail server arises from a transaction that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Hyper-V operating system service allows a perpetrator to trigger a service failure.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kernel cryptography driver cng.sys in the Windows operating system allows a hacker to execute arbitrary code.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer in memory, allows a malicious actor to execute arbitrary code.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Scripting Engine component in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to execute arbitrary code	24 Nov 202000:00	–	bdu_fstec

11 Nov 2020 10:29Current

7.8High risk

Vulners AI Score7.8

CVSS 210

CVSS 3.19.8

EPSS0.09857

SSVC