AG公司云
【误差通告】微软6月清静更新多个产品高危误差通告
2020-06-10
一. 误差概述
北京时间6月10日，微软宣布6月清静更新补丁，修复了130个清静问题，涉及Microsoft Windows、Internet Explorer、Microsoft Edge、Windows Defender、Microsoft Office、Visual Studio、Adobe Flash Player等普遍使用的产品，其中包括内存泄露和远程代码执行等高危误差类型。
本月微软月度更新修复的误差中，严重水平为要害（Critical）的误差共有12个，主要（Important）误差有118个。这是微软有史以来在一个月内宣布CVE数目最多的一次，其中Windows SMB 远程代码执行误差（CVE-2020-1301）与Windows SMBv3 客户端/服务器信息走漏误差（CVE-2020-1206）的PoC已果真，请相关用户实时更新补丁举行防护，详细误差列表请参考附录。
参考链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Jun
二. 重点误差简述
凭证产品盛行度和误差主要性筛选出此次更新中包括影响较大的误差，请相关用户重点举行关注：
CVE-2020-1206（PoC已果真）：Windows SMBv3 客户端/服务器信息走漏误差
Microsoft Server Message Block 3.1.1 (SMBv3)协议在处置惩罚某些请求时保存信息泄露误差，未经身份验证的攻击者可通过向目的SMB服务器发送特殊设计的数据包，或设置一个恶意的 SMBv3 服务器并诱导用户毗连。攻击者使用此误差可获取到敏感信息。
与SMBv3Ghost有关的内容可参考：https://mp.weixin.qq.com/s/q3dL6YI0K-cFLbNzySabHQ
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1206
CVE-2020-1301（PoC已果真）：Windows SMB 远程代码执行误差
Microsoft Server Message Block 1.0 (SMBv1) 服务器在处置惩罚某些请求时保存远程代码执行误差，经由身份验证的攻击者向目的 SMBv1 服务器发送特殊设计的数据包，乐成使用此误差的攻击者可在目的系统上执行代码。
微软已在 2014 年弃用了 SMBv1 协议，在 Windows 10 中 默认禁用SMBv1 。检测与禁用 SMB协议请参考官方文档：https://docs.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1301
CVE-2020-1281：Windows OLE 远程代码执行误差
由于Microsoft Windows OLE 无法准确验证用户输入，攻击者可以诱使用户在网页或电子邮件中翻开特殊设计的文件或程序，从而使用此误差来执行恶意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1281
CVE-2020-1300：Windows 远程执行代码误差
由于Microsoft Windows 无法准确处置惩罚 cabinet 文件，攻击者可诱使用户翻开特殊设计的 cabinet 文件或诱骗用户装置伪装成打印机驱动程序的恶意 cabinet 文件，从而使用此误差执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1300
CVE-2020-1181：Microsoft SharePoint Server 远程代码执行误差
由于SharePoint Server无法准确识别和筛选不清静的 ASP.NET Web 控件，经由身份验证的攻击者通过上传一个特殊制作的页面到SharePoint服务器，可乐成使用此误差在服务器上执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
CVE-2020-1225/1226：Microsoft Excel 远程代码执行误差
由于Microsoft Excel无法准确处置惩罚内存中的工具，导致保存远程代码执行误差。攻击者通过诱使用户使用受影响版本的Microsoft Excel翻开经由特殊设计的文件举行使用。乐成使用此误差的攻击者可以获得与目今用户相同的系统控制权限。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1226
CVE-2020-1248：GDI 远程代码执行误差
Windows 图形装备接口 (GDI) 在处置惩罚内存中工具的方法中保存远程代码执行误差。攻击者可以使用该误差全心制作一个恶意网站或恶意文件，并通过垂纶邮件等方法诱导用户点击链接或翻开附件。乐成使用此误差的攻击者可能会控制受影响的系统。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1248
CVE-2020-1299：LNK 远程代码执行误差
Windows 在处置惩罚 .LNK 文件时保存一个远程代码执行误差，攻击者可能会向用户显示包括恶意 .LNK 文件和关联的恶意二进制文件的可移除驱动器或远程共享，乐成使用此误差的攻击者可获得与外地用户相同的系统权限。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1299
ADV200010| CVE-2020-9633: Adobe Flash Player 恣意代码执行误差
此清静更新修复了 Adobe 清静通告 APSB20-30 中形貌的误差（CVE-2020-9633），此误差影响Windows、MacOS、Linux和ChromeOS，乐成使用该误差可在目今用户的情形中执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200010
https://helpx.adobe.com/cn/security/products/flash-player/apsb20-30.html
三. 影响规模
以下为重点关注误差的受影响产品版本，其他误差影响产品规模请参阅官方通告链接。
|
误差编号 |
受影响产品版本 |
|
CVE-2020-1206 |
Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1301 CVE-2020-1281 CVE-2020-1300 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1803 (Server Core Installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1181 |
Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 |
|
CVE-2020-1225 CVE-2020-1226 |
Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 2016 for Mac Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for Mac |
|
CVE-2020-1248 |
Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1299 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1803 (Server Core Installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
ADV200010 | CVE-2020-9633 |
Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2012 Windows Server 2012 R2 Windows 10 Version 2004 for x64-based Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for 32-bit Systems |
四. 误差防护
4.1 补丁更新
现在微软官方已针对受支持的产品版本宣布了修复以上误差的清静补丁，强烈建议受影响用户尽快装置补丁举行防护，官方下载链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Jun
注：由于网络问题、盘算机情形问题等缘故原由，Windows Update的补丁更新可能泛起失败。用户在装置补丁后，应实时检查补丁是否乐成更新。
右键点击Windows图标，选择“设置(N)”，选择“更新和清静”-“Windows更新”，审查该页面上的提醒信息，也可点击“审查更新历史纪录”审查历史更新情形。
针对未乐成装置的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载自力程序包并装置。
附录：误差列表
|
影响产品 |
CVE 编号 |
误差问题 |
严重水平 |
|
Microsoft Office |
CVE-2020-1181 |
Microsoft SharePoint Server 远程代码执行误差 |
Critical |
|
Internet Explorer |
CVE-2020-1213 |
VBScript 远程代码执行误差 |
Critical |
|
Internet Explorer |
CVE-2020-1216 |
VBScript 远程代码执行误差 |
Critical |
|
ChakraCore,Microsoft Edge,Internet Explorer |
CVE-2020-1219 |
Microsoft Browser 内存泄露误差 |
Critical |
|
Adobe Flash |
ADV200010 |
June 2020 Adobe Flash Security Update |
Critical |
|
ChakraCore,Microsoft Edge |
CVE-2020-1073 |
Scripting Engine 内存泄露误差 |
Critical |
|
Windows |
CVE-2020-1286 |
Windows Shell 远程代码执行误差 |
Critical |
|
Windows |
CVE-2020-1300 |
Windows 远程代码执行误差 |
Critical |
|
Windows |
CVE-2020-1248 |
GDI+ 远程代码执行误差 |
Critical |
|
Internet Explorer |
CVE-2020-1260 |
VBScript 远程代码执行误差 |
Critical |
|
Windows |
CVE-2020-1281 |
Windows OLE 远程代码执行误差 |
Critical |
|
Windows |
CVE-2020-1299 |
LNK 远程代码执行误差 |
Critical |
|
Windows |
CVE-2020-0915 |
Windows GDI 权限提升误差 |
Important |
|
Windows |
CVE-2020-0916 |
Windows GDI 权限提升误差 |
Important |
|
Windows |
CVE-2020-0986 |
Windows Kernel 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1183 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Microsoft Office |
CVE-2020-1225 |
Microsoft Excel 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1226 |
Microsoft Excel 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1229 |
Microsoft Outlook Security 功效绕过 |
Important |
|
Windows |
CVE-2020-1334 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1348 |
Windows GDI 信息披露误差 |
Important |
|
Windows |
CVE-2020-1196 |
Windows Print Configuration 权限提升误差 |
Important |
|
Windows |
CVE-2020-1197 |
Windows Error Reporting Manager 权限提升误差 |
Important |
|
Windows |
CVE-2020-1199 |
Windows Feedback Hub 权限提升误差 |
Important |
|
Windows |
CVE-2020-1201 |
Windows Now Playing Session Manager 权限提升误差 |
Important |
|
Microsoft Visual Studio,Windows |
CVE-2020-1202 |
Diagnostic Hub Standard Collector 权限提升误差 |
Important |
|
Microsoft Visual Studio,Windows |
CVE-2020-1203 |
Diagnostic Hub Standard Collector 权限提升误差 |
Important |
|
Windows |
CVE-2020-1204 |
Windows Mobile Device Management Diagnostics 权限提升误差 |
Important |
|
Windows |
CVE-2020-1206 |
Windows SMBv3 Client/Server 信息披露误差 |
Important |
|
Windows |
CVE-2020-1207 |
Win32k 权限提升误差 |
Important |
|
Windows |
CVE-2020-1208 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Windows |
CVE-2020-1209 |
Windows Network List Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1211 |
Connected Devices Platform Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1212 |
OLE Automation 权限提升误差 |
Important |
|
Internet Explorer |
CVE-2020-1214 |
VBScript 远程代码执行误差 |
Important |
|
Internet Explorer |
CVE-2020-1215 |
VBScript 远程代码执行误差 |
Important |
|
Windows |
CVE-2020-1217 |
Windows Runtime 信息披露误差 |
Important |
|
Microsoft Edge (Chromium-based) in IE Mode |
CVE-2020-1220 |
Microsoft Edge (Chromium-based) in IE Mode 诱骗误差 |
Important |
|
Windows |
CVE-2020-1222 |
Microsoft Store Runtime 权限提升误差 |
Important |
|
NuGetGallery |
CVE-2020-1340 |
NuGetGallery 诱骗误差 |
Important |
|
Microsoft Visual Studio Code Live Share extension |
CVE-2020-1343 |
Visual Studio Code Live Share 信息披露误差 |
Important |
|
Windows |
CVE-2020-1120 |
Connected User Experiences and Telemetry Service 拒绝服务误差 |
Important |
|
Microsoft Office |
CVE-2020-1148 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Windows |
CVE-2020-1194 |
Windows Registry 拒绝服务误差 |
Important |
|
Apps |
CVE-2020-1223 |
Word for Android 远程代码执行误差 |
Important |
|
Internet Explorer |
CVE-2020-1230 |
VBScript 远程代码执行误差 |
Important |
|
Windows |
CVE-2020-1231 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1232 |
Media Foundation 信息披露误差 |
Important |
|
Windows |
CVE-2020-1233 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1234 |
Windows Error Reporting 权限提升误差 |
Important |
|
Windows |
CVE-2020-1235 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1236 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Windows |
CVE-2020-1237 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1238 |
Media Foundation 内存泄露误差 |
Important |
|
Windows |
CVE-2020-1239 |
Media Foundation 内存泄露误差 |
Important |
|
Microsoft Edge |
CVE-2020-1242 |
Microsoft Edge 信息披露误差 |
Important |
|
Windows |
CVE-2020-1246 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1247 |
Win32k 权限提升误差 |
Important |
|
Windows |
CVE-2020-1262 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1269 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1271 |
Windows Backup Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1274 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1275 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1277 |
Windows Installer 权限提升误差 |
Important |
|
Microsoft Visual Studio,Windows |
CVE-2020-1278 |
Diagnostics Hub Standard Collector 权限提升误差 |
Important |
|
Windows |
CVE-2020-1279 |
Windows Lockscreen 权限提升误差 |
Important |
|
Windows |
CVE-2020-1280 |
Windows Bluetooth Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1282 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1284 |
Windows SMBv3 Client/Server 拒绝服务误差 |
Important |
|
Windows |
CVE-2020-1294 |
Windows WalletService 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1295 |
Microsoft SharePoint 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1298 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Windows |
CVE-2020-1307 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1310 |
Win32k 权限提升误差 |
Important |
|
Windows |
CVE-2020-1311 |
Component Object Model 权限提升误差 |
Important |
|
Windows |
CVE-2020-1312 |
Windows Installer 权限提升误差 |
Important |
|
Windows |
CVE-2020-1316 |
Windows Kernel 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1320 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Microsoft Office |
CVE-2020-1321 |
Microsoft Office 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1322 |
Microsoft Project 信息披露误差 |
Important |
|
Windows |
CVE-2020-1324 |
Windows 权限提升误差 |
Important |
|
System Center |
CVE-2020-1331 |
System Center Operations Manager 诱骗误差 |
Important |
|
Windows |
CVE-2020-1160 |
Microsoft Graphics Component 信息披露误差 |
Important |
|
Windows |
CVE-2020-1162 |
Windows 权限提升误差 |
Important |
|
System Center |
CVE-2020-1163 |
Microsoft Windows Defender 权限提升误差 |
Important |
|
System Center |
CVE-2020-1170 |
Microsoft Windows Defender 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1177 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Microsoft Office |
CVE-2020-1178 |
Microsoft SharePoint Server 权限提升误差 |
Important |
|
Windows |
CVE-2020-1241 |
Windows Kernel Security 功效绕过 |
Important |
|
Windows |
CVE-2020-1244 |
Connected User Experiences and Telemetry Service 拒绝服务误差 |
Important |
|
Windows |
CVE-2020-1251 |
Win32k 权限提升误差 |
Important |
|
Windows |
CVE-2020-1253 |
Win32k 权限提升误差 |
Important |
|
Windows |
CVE-2020-1254 |
Windows Modules Installer Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1255 |
Windows Background Intelligent Transfer Service 权限提升误差 |
Important |
|
Microsoft Visual Studio,Windows |
CVE-2020-1257 |
Diagnostics Hub Standard Collector 权限提升误差 |
Important |
|
Windows |
CVE-2020-1258 |
DirectX 权限提升误差 |
Important |
|
Windows |
CVE-2020-1259 |
Windows Host Guardian Service Security 功效绕过 |
Important |
|
Windows |
CVE-2020-1261 |
Windows Error Reporting 信息披露误差 |
Important |
|
Windows |
CVE-2020-1263 |
Windows Error Reporting 信息披露误差 |
Important |
|
Windows |
CVE-2020-1264 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1265 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1266 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1268 |
Windows Service 信息披露误差 |
Important |
|
Windows |
CVE-2020-1270 |
Windows WLAN Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1272 |
Windows Installer 权限提升误差 |
Important |
|
Windows |
CVE-2020-1273 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1276 |
Windows Kernel 权限提升误差 |
Important |
|
Windows |
CVE-2020-1283 |
Windows 拒绝服务误差 |
Important |
|
Windows |
CVE-2020-1287 |
Windows WalletService 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1289 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Windows |
CVE-2020-1290 |
Win32k 信息披露误差 |
Important |
|
Windows |
CVE-2020-1291 |
Windows Network Connections Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1292 |
OpenSSH for Windows 权限提升误差 |
Important |
|
Microsoft Visual Studio,Windows |
CVE-2020-1293 |
Diagnostics Hub Standard Collector 权限提升误差 |
Important |
|
Windows |
CVE-2020-1296 |
Windows Diagnostics & feedback 信息披露误差 |
Important |
|
Microsoft Office |
CVE-2020-1297 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Windows |
CVE-2020-1301 |
Windows SMB 远程代码执行误差 |
Important |
|
Windows |
CVE-2020-1302 |
Windows Installer 权限提升误差 |
Important |
|
Windows |
CVE-2020-1304 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1305 |
Windows State Repository Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1306 |
Windows Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1309 |
Microsoft Store Runtime 权限提升误差 |
Important |
|
Windows |
CVE-2020-1313 |
Windows Update Orchestrator Service 权限提升误差 |
Important |
|
Windows |
CVE-2020-1314 |
Windows Text Service Framework 权限提升误差 |
Important |
|
Internet Explorer |
CVE-2020-1315 |
Internet Explorer 信息披露误差 |
Important |
|
Windows |
CVE-2020-1317 |
Group Policy 权限提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1318 |
Microsoft Office SharePoint XSS误差 |
Important |
|
Microsoft Office |
CVE-2020-1323 |
SharePoint Open Redirect Vulnerability |
Important |
|
Azure DevOps Server |
CVE-2020-1327 |
Azure DevOps Server HTML Injection Vulnerability |
Important |
|
Apps |
CVE-2020-1329 |
Microsoft Bing Search 诱骗误差 |
Important |
声明
本清静通告仅用来形貌可能保存的清静问题，AG公司科技不为此清静通告提供任何包管或允许。由于撒播、使用此清静通告所提供的信息而造成的任何直接或者间接的效果及损失，均由使用者自己认真，AG公司科技以及清静通告作者不为此肩负任何责任。
AG公司科技拥有对此清静通告的修改息争释权。如欲转载或撒播此清静通告，必需包管此清静通告的完整性，包括版权声明等所有内容。未经AG公司科技允许，不得恣意修改或者增减此清静通告内容，不得以任何方法将其用于商业目的。
关于AG公司科技
AG公司（简称AG公司科技）建设于2000年4月，总部位于北京。在海内外设有40个分支机构，为政府、运营商、金融、能源、互联网以及教育、医疗等行业用户，提供具有焦点竞争力的清静产品及解决计划，资助客户实现营业的清静顺畅运行。
基于多年的清静攻防研究，AG公司科技在网络及终端清静、互联网基础清静、合规及清静治理等领域，为客户提供入侵检测/防护、抗拒绝服务攻击、远程清静评估以及Web清静防护等产品以及专业清静服务。
AG公司于2014年1月29日起在深圳证券生意所创业板上市，股票简称：AG公司科技，股票代码：300369。
