Today’s VERT Alert addresses Microsoft’s November 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-915 on Wednesday, November 11th. Note: Microsoft has changed their advisory format and no longer provides basic vulnerability descriptions.In-The-Wild & Disclosed CVEsCVE-2020-17087This CVE describes a local elevation of privilege vulnerability in the Windows Kernel Cryptography Driver (cng.sys) that is seeing active exploitation in the wild. The vulnerability was reported to Microsoft by Google Project Zero and was publicly disclosed ahead of the patch release due to the active exploitation.Microsoft has rated this as Exploitation Detected on the latest software release on the Exploitability Index.CVE Breakdown by TagWhile historical Microsoft Security Bulletin groupings are gone, Microsoft vulnerabilities are tagged with an identifier. This list provides a breakdown of the CVEs on a per tag basis. Other InformationNo additional advisories were included in the November Security Guidance.
Support the originator by clicking the read the rest link below.
