Security News > 2020 > November > Microsoft Patch Tuesday Update Fixes 17 Critical Bugs

Microsoft's November Patch Tuesday roundup of security fixes tackled an unusually large crop of remote code execution bugs.

Twelve of Microsoft's 17 critical patches were tied to RCE bugs.

"One of the most critical vulnerabilities patched this Tuesday is CVE-2020-17051, a remote code execution vulnerability found in Windows' Network File System," wrote Chris Hass, director of information security and research at Automox, in his Patch Tuesday analysis.

It describes a heavier reliance on the industry standard Common Vulnerability Scoring System to provide more generalized vulnerability information for Patch Tuesday security bulletins.

"Microsoft's decision to remove CVE description information from its Patch Tuesday release is a bad move, plain and simple. By relying on CVSSv3 ratings alone, Microsoft is eliminating a ton of valuable vulnerability data that can help inform organizations of the business risk a particular flaw poses to them," he wrote.

News URL

https://threatpost.com/microsoft-patch-tuesday-critical-bugs/161098/