Microsoft · Security update · July 14, 2020

KB4484453: July 2020 security update

KB4484453, released July 14, 2020, fixes 14 CVEs in Microsoft SharePoint Server 2019. One of them is being exploited (CVE-2020-1147); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
14
3 rated Critical
Exploited
1
CVE-2020-1147
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9580
99th percentile

Priority of the 14 CVEs

Patch now 1 Urgent 2 High 11 Routine 0

Applies to

Product
Microsoft SharePoint Server 2019

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1147 .NET Framework Remote Code Execution 8.8 0.9580 KEVExploited
Urgent CVE-2020-1439 Microsoft Office Remote Code Execution n/a 0.2027 Exploitation Less Likely
Urgent CVE-2020-1025 Skype for Business Elevation of Privilege n/a 0.0585 Exploitation Less Likely
High CVE-2020-1446 Microsoft Office Remote Code Execution n/a 0.1123 Exploitation Less Likely
High CVE-2020-1447 Microsoft Office Remote Code Execution n/a 0.1063 Exploitation Less Likely
High CVE-2020-1448 Microsoft Office Remote Code Execution n/a 0.0996 Exploitation Less Likely
High CVE-2020-1444 Microsoft Office SharePoint Remote Code Execution n/a 0.0905 Exploitation Less Likely
High CVE-2020-1342 Microsoft Office SharePoint Information Disclosure n/a 0.0641 Exploitation Less Likely
High CVE-2020-1445 Microsoft Office Information Disclosure n/a 0.0612 Exploitation Less Likely
High CVE-2020-1456 Microsoft Office SharePoint Spoofing n/a 0.0223 Exploitation Less Likely
High CVE-2020-1443 Microsoft Office SharePoint Spoofing n/a 0.0165 Exploitation Less Likely
High CVE-2020-1450 Microsoft Office SharePoint Spoofing n/a 0.0160 Exploitation Less Likely
High CVE-2020-1451 Microsoft Office SharePoint Spoofing n/a 0.0160 Exploitation Less Likely
High CVE-2020-1454 Microsoft Office SharePoint Spoofing n/a 0.0157 Exploitation Less Likely
Showing 1 to 14 of 14 1