Vulnerability Trends Summary
As part of our monthly vulnerability trends, this report shows the monthly top 10 trends on security vulnerabilities and how hackers, malware, and exploit kits are exploiting those vulnerabilities. To demonstrate, we assign vulnerability trends value as a percentage of how each vulnerability is significantly gaining the attention of cyber security communities, attackers, together with malware. In either case, companies can benefit from the report to have more cyber threat insights and relatively anticipate attacks wave that might target their public assets in the following months.
Download the full vulnerability digest report by clicking here.
Subscribe to the monthly vulnerability digest report by clicking here.
The following chart shows the trends.
In June 2020, we see that the information security community pays more attention, again, to Microsoft published vulnerabilities as CVE-2020-1206, dubbed as SMBleed, gained most trends. This vulnerability gained almost 25% of overall May trends.
The next in line is the critical, not yet exploitable, PaloAlto, CVE-2020-2021, authentication bypass in SAML. Although it is published at the end of June, it got more security community attentions.
The following table shows the details of the trends.
| CVE | Vulnerability | Publish Date | Exploited | Trends* |
| CVE-2020-1206 | SMBleed Information Disclosure in SMBv3 | 09/06/2020 | Yes | 25% |
| CVE-2020-2021 | PaloAlto Firewall Authentication Bypass | 29/06/2020 | No | 16% |
| CVE-2020-1301 | SMBLost Remote Code Execution in SMBv1 | 09/06/2020 | Yes | 16% |
| CVE-2020-13777 | GnuTLS Insecure Session Tickets (TLS 1.2 & 1.3) | 04/06/2020 | Yes | 9% |
| CVE-2020-9859 | Privilege Escalation in Apple iOS and MacOS | 05/06/2020 | Yes | 8% |
| CVE-2020-0543 | CrossTalk Information Disclosure in Intel CPUs | 09/06/2020 | Yes | 8% |
| CVE-2020-1170 | Elevation of Privilege in Windows Defender | 09/06/2020 | Yes | 7% |
| CVE-2020-3342 | RCE in Webex Meetings Desktop App | 17/06/2020 | No | 5% |
| CVE-2020-1299 | LNK Remote Code Execution in Windows | 09/06/2020 | Yes | 3% |
| CVE-2020-5410 | Directory Traversal in Spring Cloud Config Server | 02/06/2020 | No | 3% |
Download the full vulnerability digest report by clicking here.
Subscribe to the monthly vulnerability digest report by clicking here.
