Microsoft’s December 2020 Patch Tuesday Addresses 58 CVEs including CVE-2020-25705 (SAD DNS)

On December 8, Microsoft published its monthly security update, also known as Patch Tuesday. This month's Patch Tuesday release addresses 58 CVEs, 9 of which were rated critical, including a fix for CVE-2020-25705, also know as SAD DNS, a spoofing vulnerability in the Windows DNS Resolver, a component of the Windows TCP/IP stack that is included in each Windows release. 

This month's Patch Tuesday release includes fixes for Microsoft Windows, Microsoft Edge (EdgeHTML-based), Microsoft Edge for Android, ChakraCore, Microsoft Office and Microsoft Office Services and Web Apps, Microsoft Exchange Server, Azure DevOps, Microsoft Dynamics, Visual Studio, Azure SDK, and Azure Sphere.

For more information about Patch Tuesday, including the availability of patches and Tenable product coverage, please visit our blog.