After Microsoft rolled out vulnerabilities fixes for April, a Forbes tech article highlights seven major ones that affect Windows 10. While there are already updates for these vulnerabilities, users should know how exposed to hackers they have come.
The CVE-2020-0965 leak is known as a Microsoft Windows Codecs Library remote code execution vulnerability. This particular one concerns how the Codecs Library handles objects in memory. Hackers will require a maliciously crafted image file to exploit this weakness.
Another one is the CVE-2020-0910 Windows Hyper-V remote code execution vulnerability. With this one, an attacker running a malicious application on a guest operating system can exploit an improperly validated input from an authenticated user on that guest system.
The CVE-2020-0948, CVE-2020-0949 and CVE-2020-0950 vulnerabilities are all alike. They are memory corruption vulnerabilities that are found in Windows Media Foundation. An attacker can take advantage of it by opening a malicious document or visiting a malicious web page.
Also read:
– OnePlus 8 And OnePlus 8 Pro Launch Amidst Call For Boycotting Chinese Products
– YouTube Music Gets New Explore Tab To Aid Easy Access To Contents
– GitHub Reduces Subscription Prices, Offers Free Private Repositories For Unlimited Collaborators
If a hacker succeeds in exploiting them, such a person can do the following: install a program, change or delete data and also create an account that has full user rights.
In addition, there is the CVE-2020-0687, which is a remote code execution vulnerability. This one concerns the Windows font library. An attacker can only exploit it if they successfully create misleading fonts through a web-based attack scenario or a file-sharing one. This will also lead to taking control of the victim’s system.
CVE-2020-0907 is the seventh vulnerability and it affects Microsoft graphic components. It concerns the way that the software interacts with objects in the system memory. With this weakness, a hacker can deceive a user to open a corrupt file. This would then allow them to execute arbitrary code on the system.
The good news is that Microsoft already released patches that fix these Windows 10 vulnerabilities. If they have not arrived for your computer, you can check for updates from your Windows Updates option in your PC settings.
For your daily dose of tech, lifestyle and trending content, make sure to follow Plat4om on Twitter @Plat4omLive, on Instagram @Plat4om, on LinkedIn at Plat4om, and on Facebook at Plat4om. You can also email us at info@techtalkwithtdafrica.com. Finally, don’t forget to subscribe to our YouTube channel HERE.
