One of these includes a privilege escalation vulnerability in the Microsoft Office. The flaw, CVE-2020-1025, existed due to improper validation of OAuth token by Microsoft SharePoint Server and Skype for Business Server. To exploit the flaw, an attacker could maliciously modify the tokens to bypass authentication and gain access.
Likewise, another notable vulnerability CVE-2020-1350 affected the Windows Domain Name System server. It existed due to improper handling of requests by the servers. Hence, an attacker could exploit the bug by sending malicious requests to the server.
Besides, Microsoft also addressed another flaw, CVE-2020-1421, in Windows systems that appeared while processing .LNK files. Regarding this bug, their advisory reads,
The attacker could present to the user a removable drive, or remote share, that contains a malicious .LNK file and an associated malicious binary. When the user opens this drive (or remote share) in Windows Explorer, or any other application that parses the .LNK file, the malicious binary will execute code of the attacker’s choice, on the target system.Hence, exploiting the bug could let the attacker gain access to the system in the context of the current user. The risk was higher in the cases of victims with admin accounts.
One of these bugs was important because it became publicly disclosed. This vulnerability, CVE-2020-1463, appeared in the way SharedStream Library handled objects in memory. An attacker could exploit the flaw by running maliciously crafted apps.
Since the patches are out, users must ensure updating their devices at the earliest to avoid any possible attacks.
Let us know your thoughts in the comments.
