【漏洞情报】微软2020年03月补丁情报

【漏洞详情】

微软于本周发布了2020年03月安全补丁，共修复安全漏洞115个，其中26个标注为Critical，88个标注为Important。覆盖Microsoft Windows、Edge (EdgeHTML-based and Chromium-based)、ChakraCore、Internet Explorer (IE)、Exchange Server、Azure DevOps、Windows Defender、Visual Studio等产品，请受影响的用户综合评估漏洞风险，并选择升级相关补丁。严重漏洞清单如下：

序号	CVE编号	CVE标题	严重程度
1	CVE-2020-0852	Microsoft Word Remote Code Execution Vulnerability	Critical
2	CVE-2020-0905	Dynamics Business Central Remote Code Execution Vulnerability	Critical
3	CVE-2020-0684	LNK Remote Code Execution Vulnerability	Critical
4	CVE-2020-0811	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
5	CVE-2020-0812	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
6	CVE-2020-0881	GDI+ Remote Code Execution Vulnerability	Critical
7	CVE-2020-0883	GDI+ Remote Code Execution Vulnerability	Critical
8	CVE-2020-0801	Media Foundation Memory Corruption Vulnerability	Critical
9	CVE-2020-0807	Media Foundation Memory Corruption Vulnerability	Critical
10	CVE-2020-0809	Media Foundation Memory Corruption Vulnerability	Critical
11	CVE-2020-0869	Media Foundation Memory Corruption Vulnerability	Critical
12	CVE-2020-0768	Microsoft Browser Memory Corruption Vulnerability	Critical
13	CVE-2020-0830	Microsoft Browser Memory Corruption Vulnerability	Critical
14	CVE-2020-0816	Microsoft Edge Memory Corruption Vulnerability	Critical
15	CVE-2020-0823	Scripting Engine Memory Corruption Vulnerability	Critical
16	CVE-2020-0825	Scripting Engine Memory Corruption Vulnerability	Critical
17	CVE-2020-0826	Scripting Engine Memory Corruption Vulnerability	Critical
18	CVE-2020-0827	Scripting Engine Memory Corruption Vulnerability	Critical
19	CVE-2020-0828	Scripting Engine Memory Corruption Vulnerability	Critical
20	CVE-2020-0829	Scripting Engine Memory Corruption Vulnerability	Critical
21	CVE-2020-0831	Scripting Engine Memory Corruption Vulnerability	Critical
22	CVE-2020-0832	Scripting Engine Memory Corruption Vulnerability	Critical
23	CVE-2020-0833	Scripting Engine Memory Corruption Vulnerability	Critical
24	CVE-2020-0848	Scripting Engine Memory Corruption Vulnerability	Critical
25	CVE-2020-0824	VBScript Remote Code Execution Vulnerability	Critical
26	CVE-2020-0847	VBScript Remote Code Execution Vulnerability	Critical

【风险评级】

高危

【影响范围】

Microsoft Windows及相关产品

【修复建议】

建议用户关注并依据实际业务评估漏洞风险影响，选择更新相关产品补丁，以提高系统安全性；

修复方法：打开 Windows Update 更新功能，点击“检查更新”按钮，依据业务需求下载安装相关安全补丁，安装完毕后重启系统，并检查系统运行情况。

【参考链接】

https://portal.msrc.microsoft.com/en-us/security-guidance

特别提醒：修复漏洞前请进行充分测试，并务必做好数据备份和快照，防止出现意外。

平安云

2020年3月13日

平安云公告

【漏洞情报】微软2020年03月补丁情报