Patch Tuesday 05/12/2020 Notes

This advisory addresses the latest vulnerabilities announced from Microsoft for their "Patch Tuesday" announcement. This advisory summarizes vulnerabilities and issues, along with highlighting any notable vulnerabilities that may impact our customers.

Recommendations

Keep up to date with the most recent vulnerabilities impacting you in our Vulnerabilities tab. Contact your account manager for more information
Be sure to apply patches in a timely manner to mitigate these and other vulnerabilities

Details

There were 112 vulnerabilities in total this Tuesday, with 5 being rated as Critical, 80 being rated as High, 8 as High/Medium and the remaining 19 being rated as Medium.

The Critical rated vulnerabilities are Remote Code Execution (RCE) vulnerabilities impacting Microsoft Sharepoint along with one vulnerability impacting Visual Studio Code, the popular code-editing app.

79 vulnerabilities (~70%) impact Microsoft Windows 10 32-bit Systems, with various components affected, along with various levels of severity.

One of the more notable Critical level vulnerabilities (CVE-2020-1192) which affects Visual Studio Code could impact a large amount of users using this popular editor. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to convince a target to open a specially crafted file in Visual Studio Code with the Python extension installed.

Other critical vulnerabilities include:

CVE-2020-1069

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security context of the SharePoint application pool process. To exploit the vulnerability, an authenticated user must create and invoke a specially crafted page on an affected version of Microsoft SharePoint Server.

CVE-2020-1023

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.

CVE-2020-1024

CVE-2020-1102

Two other products had a relatively decent number of vulnerabilities impacting them as well, including Microsoft Sharepoint (Enterprise Server 2013 and Enterprise Server 2016) and Internet Explorer 11 (Windows 10 32-bit Systems), with 12 and 6 vulnerabilities impacting these products respectively. Three of the vulnerabilities impacting Sharepoint were rated as Critical due to allowing remote code execution capabilities