October 2020 - Microsoft Releases Security Patches

Microsoft addresses several vulnerabilities in its October security bulletin. Trend Micro Deep Security covers the following:

• CVE-2020-16915 - Media Foundation Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This memory corruption vulnerability exists in the mishandling of objects in memory by the Windows Media Foundation. Attackers looking to take advantage of this vulnerability must convince a user to a webpage that hosts an exploit to this vulnerability.



• CVE-2020-16922 - Windows Spoofing Vulnerability
  Risk Rating: Important
  
  This spoofing vulnerability exists in the validation of file signatures. When the vulnerability is successfully exploited, it will allow loading of potentially malicious files.



• CVE-2020-16896 - Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
  Risk Rating: Important
  
  This information disclousre vulnerability exists in the RDP when it checks specially crafted requests. When the vulnerability is successfully exploited, an attacker could gain information to further attacks to the vulnerable machine.