Top 10 Vulnerabilities
Cybersecurity and Infrastructure Security Agency, part of US Department of Homeland Security, published a few days ago a list of most popularly exploited vulnerabilities in recent years.
Not surprisingly, most often exploited vulnerabilities concern Microsoft’s Object Linking and Embedding (OLE) technology. Also not surprisingly, for most of the vulnerabilities the relevant patches have been already released and keeping the systems up-to-date should provide good protection.
If you want to get a short executive summary, here is the list:
- CVE-2017-11882,
- CVE-2017-0199,
- CVE-2017-5638,
- CVE-2012-0158,
- CVE-2019-0604,
- CVE-2017-0143,
- CVE-2018-4878,
- CVE-2017-8759,
- CVE-2015-1641,
- and CVE-2018-7600
If you are interested in more details, check out the CISA website:
us-cert.gov/ncas/alerts/aa20-133a.
The vulnerabilities are reported as Alert AA20-133A.
