Vulnerability Trends October 2020

ObaidaAlsulaiman

Obaida Al-Sulaiman, Information Security Manager at ScanTitan,

Table of Contents
Archived reportThis digest covers October 2020 and is kept for reference. The details were accurate when it was published and have not been updated. For current data, see our vulnerability statistics report and the research library.

As part of our monthly vulnerability trends, this report shows the monthly top 10 trends on security vulnerabilities and how hackers, malware, and exploit kits are exploiting those vulnerabilities. To demonstrate, we assign vulnerability trends value as a percentage of how each vulnerability is significantly gaining the attention of cyber security communities, attackers, together with malware. In either case, companies can benefit from the report to have more cyber threat insights and relatively anticipate attacks wave that might target their public assets in the following months.

Subscribe to the monthly vulnerability digest report by clicking here.

Download the full vulnerability digest report by clicking here.

The following chart shows the trends.

In October 2020, we see cyber security community responded more to Microsoft vulnerabilities. Especially. the Bad Neighbor or Ping of Death Redux where it gained 40% of overall October trends.

Other important vulnerabilities have been reported as trends. That includes Oracle Web Logic RCE and Heap overflow in Google Chrome.

The following table shows the details of the trends.

CVEVulnerabilityPublish DateExploitedTrends*
CVE-2020-16898Bad Neighbour / Ping of Death Redux09/09/2020No20%
CVE-2020-16938Privilege Escalation in Windows03/09/2020Yes17%
CVE-2020-14882RCE in Oracle Web Logic11/09/2020Yes16%
CVE-2020-5135DoS in SonicWall01/09/2020Yes13%
CVE-2020-16952RCE in Microsoft Sharepoint09/09/2020No11%
CVE-2020-15999Heap Overflow in Chrome Freetype16/09/2020No7%
CVE-2020-16947RCE in Microsoft Outlook Client09/09/2020No5%
CVE-2020-12928Privilege Escalation in AMD Ryzen Master02/09/2020Yes5%
CVE-2020-0416Privilege Escalation in Android03/09/2020No4%
CVE-2020-15157Credential Leakage in Containerd08/09/2020Yes2%

Subscribe to the monthly vulnerability digest report by clicking here.

Download the full vulnerability digest report by clicking here.

o

Information Security Manager · Dubai, UAE · 12+ years InfoSec experience

Obaida specialises in web application security, vulnerability management, and external attack surface reduction for SMB and mid-market organisations. All ScanTitan content is reviewed against live scan findings before publication.

Share :

Facebook
LinkedIn

Continue reading

Weekly security digest

New CVEs, scan methodology updates, practical guides. One email per week — no sales pitch.

GDPR compliant · Unsubscribe any time