Loading...
Blogs & Stories

SpiderLabs Blog

Attracting more than a half-million annual readers, this is the security community's go-to destination for technical breakdowns of the latest threats, critical vulnerability disclosures and cutting-edge research.

Patch Tuesday, February 2020

February's Patch Tuesday is here and brings with it patches for 98 CVEs. These are split between 13 CVEs rated as "Critical" and 85 CVEs rated as "Important." Among the "Critical" patches, Remote Code Execution (RCE) vulnerabilities in the Scripting Engine make up more than half of the list. It's a regular piece of software patched pretty much every Patch Tuesday. Still, extra attention is currently on the Scripting Engine after a zero-day exploit (CVE-2020-0674) was discovered compromising systems just after January's Patch Tuesday. Closing out the "Critical" list are RCE vulnerabilities in Remote Desktop, Media Foundation, and LNK shortcuts.

The theme of the vulnerabilities in the list ranked as "Important" is "Privilege Escalation," with that class of vulnerability representing a full 53 out 85 patched. Privilege escalation vulnerabilities are a cornerstone of system exploitation. It allows an attacker to go from using just a regular "Joe User" account to full system ownership, potentially gaining administrative access to the entire network. Also included under "Important" are Remote Code Execution vulnerabilities in the Office Suite, MS Exchange, and MS-SQL server, as well as Denial of Service vulnerabilities in Windows Hyper-V.

Luckily, none of these vulnerabilities have any in the wild exploitation, so administrators have plenty of time to get the proper patches in place before there is public exploitation. So let's get patching and, as always, stay safe out there!

 

Critical

LNK Remote Code Execution Vulnerability
CVE-2020-0729
Remote Code Execution

Media Foundation Memory Corruption Vulnerability
CVE-2020-0738
Remote Code Execution

Remote Desktop Client Remote Code Execution Vulnerability
CVE-2020-0681, CVE-2020-0734
Remote Code Execution

Scripting Engine Memory Corruption Vulnerability
CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767
Remote Code Execution

Windows Remote Code Execution Vulnerability
CVE-2020-0662
Remote Code Execution

February 2020 Adobe Flash Security Update
ADV200003
Remote Code Execution

 

Important

Active Directory Elevation of Privilege Vulnerability
CVE-2020-0665
Elevation of Privilege

Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749, CVE-2020-0750
Elevation of Privilege

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
CVE-2020-0727
Elevation of Privilege

DirectX Elevation of Privilege Vulnerability
CVE-2020-0709, CVE-2020-0732
Elevation of Privilege

DirectX Information Disclosure Vulnerability
CVE-2020-0714
Information Disclosure

Microsoft Browser Information Disclosure Vulnerability
CVE-2020-0706
Information Disclosure

Microsoft Edge Elevation of Privilege Vulnerability
CVE-2020-0663
Elevation of Privilege

Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-0759
Remote Code Execution

Microsoft Exchange Memory Corruption Vulnerability
CVE-2020-0688
Remote Code Execution

Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2020-0692
Elevation of Privilege

Microsoft Graphics Components Information Disclosure Vulnerability
CVE-2020-0746
Information Disclosure

Microsoft Office Online Server Spoofing Vulnerability
CVE-2020-0695
Spoofing

Microsoft Office SharePoint XSS Vulnerability
CVE-2020-0694
Spoofing

Microsoft Office Tampering Vulnerability
CVE-2020-0697
Tampering

Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2020-0696
Security Feature Bypass

Microsoft Secure Boot Security Feature Bypass Vulnerability
CVE-2020-0689
Security Feature Bypass

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVE-2020-0618
Remote Code Execution

Remote Desktop Services Remote Code Execution Vulnerability
CVE-2020-0655
Remote Code Execution

Win32k Elevation of Privilege Vulnerability
CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731
Elevation of Privilege

Win32k Information Disclosure Vulnerability
CVE-2020-0716, CVE-2020-0717
Information Disclosure

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-0703
Elevation of Privilege

Windows Client License Service Elevation of Privilege Vulnerability
CVE-2020-0701
Elevation of Privilege

Windows COM Server Elevation of Privilege Vulnerability
CVE-2020-0685
Elevation of Privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2020-0657
Elevation of Privilege

Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2020-0658
Information Disclosure

Windows Data Sharing Service Elevation of Privilege Vulnerability
CVE-2020-0659, CVE-2020-0747
Elevation of Privilege

Windows Elevation of Privilege Vulnerability
CVE-2020-0737, CVE-2020-0739
Elevation of Privilege

Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2020-0753, CVE-2020-0754
Elevation of Privilege

Windows Error Reporting Manager Elevation of Privilege Vulnerability
CVE-2020-0678
Elevation of Privilege

Windows Function Discovery Service Elevation of Privilege Vulnerability
CVE-2020-0679, CVE-2020-0680, CVE-2020-0682
Elevation of Privilege

Windows GDI Information Disclosure Vulnerability
CVE-2020-0744
Information Disclosure

Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2020-0715, CVE-2020-0745, CVE-2020-0792
Elevation of Privilege

Windows Hyper-V Denial of Service Vulnerability
CVE-2020-0661, CVE-2020-0751
Denial of Service

Windows Imaging Library Remote Code Execution Vulnerability
CVE-2020-0708
Remote Code Execution

Windows IME Elevation of Privilege Vulnerability
CVE-2020-0707
Elevation of Privilege

Windows Information Disclosure Vulnerability
CVE-2020-0698
Information Disclosure

Windows Installer Elevation of Privilege Vulnerability
CVE-2020-0683, CVE-2020-0686
Elevation of Privilege

Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-0668, CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672
Elevation of Privilege

Windows Kernel Information Disclosure Vulnerability
CVE-2020-0736
Information Disclosure

Windows Key Isolation Service Information Disclosure Vulnerability
CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0755, CVE-2020-0756
Information Disclosure

Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
CVE-2020-0733
Elevation of Privilege

Windows Modules Installer Service Information Disclosure Vulnerability
CVE-2020-0728
Information Disclosure

Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability
CVE-2020-0705
Information Disclosure

Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
CVE-2020-0660
Denial of Service

Windows Search Indexer Elevation of Privilege Vulnerability
CVE-2020-0666, CVE-2020-0667, CVE-2020-0735, CVE-2020-0752
Elevation of Privilege

Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2020-0730
Elevation of Privilege

Windows Wireless Network Manager Elevation of Privilege Vulnerability
CVE-2020-0704
Elevation of Privilege

Microsoft Office SharePoint XSS Vulnerability
CVE-2020-0693
Spoofing

Surface Hub Security Feature Bypass Vulnerability
CVE-2020-0702
Security Feature Bypass

Recent SpiderLabs Blog Posts