Popular Products
Latest Products
Recommended Services
Computing
Storage
Backup
Network&CDN
Security
Database
Big Data Computing
Big Data Search and Analysis
Big Data Application
Big Data Solutions
Domain Name and Website
Platform
Communications
Intelligent Management
Office Automation
Auto Service
Management & Monitoring
Middleware
IT Management & Tools
Enterprise Service Solutions
Hybrid Cloud Solutions
Big Data Solutions
AI Solutions
Security Solutions
Private Cloud Solutions
Financial Solutions
Smart City Solutions
Medical Solutions
【漏洞详情】
微软于本周发布了2020年12月安全补丁，共修复包括58个安全漏洞，其中Microsoft SharePoint、Microsoft Dynamics 365 for Finance and Operations、Hyper-V、Microsoft Exchange、Chakra Scripting Engine、Git for Visual Studio 等产品中的10 个漏洞被微软官方标记为紧急漏洞，严重漏洞清单如下：
|
序号 |
CVE 编号 |
CVE 标题 |
严重程度 |
|
1 |
VE-2020-17131 |
Chakra Scripting Engine Memory Corruption Vulnerability |
Critical |
|
2 |
CVE-2020-17095 |
Hyper-V Remote Code Execution Vulnerability |
Critical |
|
3 |
CVE-2020-17152 |
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability |
Critical |
|
4 |
CVE-2020-17158 |
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability |
Critical |
|
5 |
CVE-2020-17117 |
Microsoft Exchange Remote Code Execution Vulnerability |
Critical |
|
6 |
CVE-2020-17132 |
Microsoft Exchange Remote Code Execution Vulnerability |
Critical |
|
7 |
CVE-2020-17142 |
Microsoft Exchange Remote Code Execution Vulnerability |
Critical |
|
8 |
CVE-2020-17118 |
Microsoft SharePoint Remote Code Execution Vulnerability |
Critical |
|
9 |
CVE-2020-17121 |
Microsoft SharePoint Remote Code Execution Vulnerability |
Critical |
【风险评级】
高危
【影响范围】
l Windows系统及相关产品
【修复建议】
建议受影响的用户结合实际业务评估漏洞风险影响，可通过如下方案避免安全风险：
修复方法：打开 Windows Update 更新功能，点击“检查更新”按钮，依据业务需求下载安装相关安全补丁，安装完毕后重启系统，并检查系统运行情况。
【参考链接】
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Dec
特别提醒：修复漏洞前请进行充分测试，并务必做好数据备份和快照，防止出现意外。
平安云
2020年12月9日
