Tuesday, February 23, 03:24
Home security Microsoft Patch Tuesday-September fixes 129 vulnerabilities

Microsoft Patch Tuesday-September fixes 129 vulnerabilities

Microsoft Patch Tuesday
Microsoft Patch Tuesday-September fixes 129 vulnerabilities

Η Microsoft released yesterday on updates security for the month of September, also known as Patch Tuesday September 2020. This month, the company fixed 129 vulnerabilities in 15 of its products (from Windows to ASP.NET).

It is worth noting that in the Patch Tuesday September September 2020, 32 out of 129 vulnerabilities corrected, classified as Remote Execution Code (RCE) issues, which are bugs that allow attackers to exploit vulnerabilities applications remotely, via a network.

Of these 32 vulnerabilities, the 20 were classified as "critical", that is, they are some of the most important errors repaired in its products Microsoft this month. The list of 20 critical RCEs includes errors in:

All the vulnerabilities mentioned above are serious issues, and especially those that affect them Windows, SharePoint and Dynamics 365 (as these systems are often installed in large corporate networks).

vulnerabilities
Microsoft Patch Tuesday-September fixes 129 vulnerabilities

Microsoft releases it every month updates "Patch Tuesday" and the creators malware monitor these monthly security updates to choose the most useful and dangerous vulnerabilities and change them data updates to find the exact bug fixed by Microsoft. These errors can be used for future reference attacks.

System administrators should consider threatening which poses each of these RCE vulnerabilities and then implement Patch Tuesday as soon as possible to stay safe.

In the table below, you can see all the vulnerabilities that are fixed with the Patch Tuesday September September 2020:

TagCVE IDCVE Title
Active DirectoryCVE-2020-0761Active Directory Remote Code Execution Vulnerability
Active DirectoryCVE-2020-0856Active Directory Information Disclosure Vulnerability
Active DirectoryCVE-2020-0718Active Directory Remote Code Execution Vulnerability
Active DirectoryCVE-2020-0664Active Directory Information Disclosure Vulnerability
Active Directory Federation ServicesCVE-2020-0837ADFS Spoofing Vulnerability
ASP.NETCVE-2020-1045Microsoft ASP.NET Core Security Feature Bypass Vulnerability
Common Log File System DriverCVE-2020-1115Windows Common Log File System Driver Elevation of Privilege Vulnerability
Internet ExplorerCVE-2020-1012WinINet API Elevation of Privilege Vulnerability
Internet ExplorerCVE-2020-16884Internet Explorer Browser Helper Object (BHO) Memory Corruption Vulnerability
Internet ExplorerCVE-2020-1506Windows Start-Up Application Elevation of Privilege Vulnerability
Microsoft BrowsersCVE-2020-0878Microsoft Browser Memory Corruption Vulnerability
Microsoft DynamicsCVE-2020-16857Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Microsoft DynamicsCVE-2020-16858Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16860Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Microsoft DynamicsCVE-2020-16859Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16861Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16872Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16864Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16878Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft DynamicsCVE-2020-16862Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Microsoft DynamicsCVE-2020-16871Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Microsoft Exchange ServerCVE-2020-16875Microsoft Exchange Memory Corruption Vulnerability
Microsoft Graphics ComponentCVE-2020-0921Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics ComponentCVE-2020-0998Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft Graphics ComponentCVE-2020-1091Windows Graphics Component Information Disclosure Vulnerability
Microsoft Graphics ComponentCVE-2020-1152Windows Win32k Elevation of Privilege Vulnerability
Microsoft Graphics ComponentCVE-2020-1097Windows Graphics Component Information Disclosure Vulnerability
Microsoft Graphics ComponentCVE-2020-1083Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics ComponentCVE-2020-1053DirectX Elevation of Privilege Vulnerability
Microsoft Graphics ComponentCVE-2020-1308DirectX Elevation of Privilege Vulnerability
Microsoft Graphics ComponentCVE-2020-1245Win32k Elevation of Privilege Vulnerability
Microsoft Graphics ComponentCVE-2020-1285GDI + Remote Code Execution Vulnerability
Microsoft Graphics ComponentCVE-2020-1256Windows GDI Information Disclosure Vulnerability
Microsoft Graphics ComponentCVE-2020-1250Win32k Information Disclosure Vulnerability
Microsoft JET Database EngineCVE-2020-1039Jet Database Engine Remote Code Execution Vulnerability
Microsoft JET Database EngineCVE-2020-1074Jet Database Engine Remote Code Execution Vulnerability
Microsoft NTFSCVE-2020-0838NTFS Elevation of Privilege Vulnerability
Microsoft OfficeCVE-2020-1594Microsoft Excel Remote Code Execution Vulnerability
Microsoft OfficeCVE-2020-1335Microsoft Excel Remote Code Execution Vulnerability
Microsoft OfficeCVE-2020-16855Microsoft Office Information Disclosure Vulnerability
Microsoft OfficeCVE-2020-1338Microsoft Word Remote Code Execution Vulnerability
Microsoft OfficeCVE-2020-1332Microsoft Excel Remote Code Execution Vulnerability
Microsoft OfficeCVE-2020-1224Microsoft Excel Information Disclosure Vulnerability
Microsoft OfficeCVE-2020-1218Microsoft Word Remote Code Execution Vulnerability
Microsoft OfficeCVE-2020-1193Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1345Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1205Microsoft SharePoint Spoofing Vulnerability
Microsoft Office SharePointCVE-2020-1210Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1514Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1595Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1523Microsoft SharePoint Server Tampering Vulnerability
Microsoft Office SharePointCVE-2020-1440Microsoft SharePoint Server Tampering Vulnerability
Microsoft Office SharePointCVE-2020-1200Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1482Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1198Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1227Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1576Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1452Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1575Microsoft Office SharePoint XSS Vulnerability
Microsoft Office SharePointCVE-2020-1453Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft Office SharePointCVE-2020-1460Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft OneDriveCVE-2020-16853OneDrive for Windows Elevation of Privilege Vulnerability
Microsoft OneDriveCVE-2020-16851OneDrive for Windows Elevation of Privilege Vulnerability
Microsoft OneDriveCVE-2020-16852OneDrive for Windows Elevation of Privilege Vulnerability
Microsoft Scripting EngineCVE-2020-1057Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineCVE-2020-1180Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineCVE-2020-1172Scripting Engine Memory Corruption Vulnerability
Microsoft WindowsCVE-2020-1596TLS Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-1169Windows Runtime Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1593Windows Media Audio Decoder Remote Code Execution Vulnerability
Microsoft WindowsCVE-2020-1159Windows Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1598Windows UPnP Service Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0790Microsoft splwow64 Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0922Microsoft COM for Windows Remote Code Execution Vulnerability
Microsoft WindowsCVE-2020-0782Windows Cryptographic Catalog Services Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0648Windows RSoP Service Application Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0766Microsoft Store Runtime Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1590Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1376Windows Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1471Windows CloudExperienceHost Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-16879Projected Filesystem Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-1013Group Policy Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1532Windows InstallService Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1491Windows Function Discovery Service Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1303Windows Runtime Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1252Windows Remote Code Execution Vulnerability
Microsoft WindowsCVE-2020-1559Windows Storage Services Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1507Microsoft COM for Windows Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1508Windows Media Audio Decoder Remote Code Execution Vulnerability
Microsoft WindowsCVE-2020-0914Windows State Repository Service Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-0886Windows Storage Services Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0989Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-0875Microsoft splwow64 Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-0912Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1038Windows Routing Utilities Denial of Service
Microsoft WindowsCVE-2020-0908Windows Text Service Module Remote Code Execution Vulnerability
Microsoft WindowsCVE-2020-1052Windows Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0911Windows Modules Installer Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0805Projected Filesystem Security Feature Bypass Vulnerability
Microsoft WindowsCVE-2020-1119Windows Information Disclosure Vulnerability
Microsoft WindowsCVE-2020-1146Microsoft Store Runtime Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-0951Windows Defender Application Control Security Feature Bypass Vulnerability
Microsoft WindowsCVE-2020-1122Windows Language Pack Installer Elevation of Privilege Vulnerability
Microsoft WindowsCVE-2020-1098Windows Shell Infrastructure Component Elevation of Privilege Vulnerability
Microsoft Windows Codecs LibraryCVE-2020-1319Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Microsoft Windows Codecs LibraryCVE-2020-0997Windows Camera Codec Pack Remote Code Execution Vulnerability
Microsoft Windows Codecs LibraryCVE-2020-1129Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Microsoft Windows DNSCVE-2020-0839Windows dnsrslvr.dll Elevation of Privilege Vulnerability
Microsoft Windows DNSCVE-2020-1228Windows DNS Denial of Service Vulnerability
Microsoft Windows DNSCVE-2020-0836Windows DNS Denial of Service Vulnerability
Open Source SoftwareCVE-2020-16873Xamarin.Forms Spoofing Vulnerability
SQL ServerCVE-2020-1044SQL Server Reporting Services Security Feature Bypass Vulnerability
Visual StudioCVE-2020-16874Visual Studio Remote Code Execution Vulnerability
Visual StudioCVE-2020-16856Visual Studio Remote Code Execution Vulnerability
Visual StudioCVE-2020-16881Visual Studio JSON Remote Code Execution Vulnerability
Windows DHCP ServerCVE-2020-1031Windows DHCP Server Information Disclosure Vulnerability
Windows Diagnostic HubCVE-2020-1130Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Windows Diagnostic HubCVE-2020-1133Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Windows Hyper-VCVE-2020-0904Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-VCVE-2020-0890Windows Hyper-V Denial of Service Vulnerability
Windows kernelCVE-2020-0941Win32k Information Disclosure Vulnerability
Windows kernelCVE-2020-0928Windows Kernel Information Disclosure Vulnerability
Windows kernelCVE-2020-16854Windows Kernel Information Disclosure Vulnerability
Windows kernelCVE-2020-1034Windows Kernel Elevation of Privilege Vulnerability
Windows kernelCVE-2020-1033Windows Kernel Information Disclosure Vulnerability
Windows kernelCVE-2020-1589Windows Kernel Information Disclosure Vulnerability
Windows kernelCVE-2020-1592Windows Kernel Information Disclosure Vulnerability
Windows Print Spooler ComponentsCVE-2020-1030Windows Print Spooler Elevation of Privilege Vulnerability
Windows ShellCVE-2020-0870Shell infrastructure component Elevation of Privilege Vulnerability

LEAVE ANSWER

Please enter your comment!
Please enter your name here

Digital Fortress
Digital Fortresshttps://www.secnews.gr
Pursue Your Dreams & Live!

LIVE NEWS

00:03:39

The top list of Xbox Game Pass games for 2021

https://www.youtube.com/watch?v=zJLiVBYFACw Μία από τις κορυφαίες πλατφόρμες με παιχνίδια για το Xbox και το PC σας σε προνομιακή...

The price of Bitcoin dropped by $ 10.000 in 24 hours

After weeks of steady gains, the price of Bitcoin plummeted. More than 10.000 ...

iPhone / iPad: How to delete old text messages automatically

By default, your iPhone and iPad store every iMessage text message and SMS you receive. As a result, you could ...

Tesla: The world's largest battery system is making progress

A new video taken by a drone shows that Tesla is making progress towards the completion of the Moss Landing Megapack project that ...

SonicWall is releasing an additional update for the SMA 100 vulnerability

SonicWall has released a second firmware update for a zero-day SMA-100 vulnerability known to be used in attacks and warns by saying ...

Chinese hackers have cloned a tool belonging to the NSA Equation Group

Chinese hackers "cloned" and used for years a zero-day exploit of Windows stolen by the NSA Equation Group, say the ...

Underwriters Laboratories (UL) was attacked by ransomware

UL LLC, known as Underwriters Laboratories, suffered a ransomware attack in which its servers were encrypted and forced to close ...

An image of Apple's third generation AirPods leaked

An image claiming to depict Apple's third-generation AirPods has leaked to the internet. The image was announced by 52audio. To her...

Kroger: Data breach exposes employee data

Giant supermarket chain Kroger suffered data breach after breaching a service used to transfer files securely ...

New Chrome firewall for iOS locks Incognito tabs with Face ID

Google Chrome for iOS gets a new privacy feature that allows users to lock open Incognito tabs and ...