Microsoft · Security update · May 12, 2020

KB4556807: May 2020 cumulative update for Windows 10 1803

KB4556807, released May 12, 2020, fixes 85 CVEs across 14 products. One of them is being exploited (CVE-2020-1054); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
85
9 rated Critical
Exploited
1
CVE-2020-1054
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.5388
99th percentile

Priority of the 85 CVEs

Patch now 1 Urgent 15 High 53 Routine 16

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.1488
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems17134.1488
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.1488
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems17134.1488
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems17134.1488
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems17134.1488
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation)17134.1488
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.1488
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems17134.1488
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.1488
Windows 10 Version 1803 for 32-bit Systems17134.1488
Windows 10 Version 1803 for ARM64-based Systems17134.1488
Windows 10 Version 1803 for x64-based Systems17134.1488
Windows Server, version 1803 (Server Core Installation)17134.1488

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1054 Microsoft Graphics Component Elevation of Privilege 7.0 0.5388 KEVExploited
Urgent CVE-2020-0605 .NET Framework Remote Code Execution n/a 0.1840 Exploitation Less Likely
Urgent CVE-2020-1062 Internet Explorer Remote Code Execution 6.4 0.0624 More likely
Urgent CVE-2020-1126 Microsoft Windows Remote Code Execution 8.8 0.0414 Exploitation Less Likely
Urgent CVE-2020-1117 Microsoft Graphics Component Remote Code Execution 8.8 0.0409 Exploitation Less Likely
Urgent CVE-2020-1153 Microsoft Graphics Component Remote Code Execution 7.8 0.0396 Exploitation Less Likely
Urgent CVE-2020-1028 Microsoft Windows Remote Code Execution 7.8 0.0391 Exploitation Less Likely
Urgent CVE-2020-1136 Microsoft Windows Remote Code Execution 7.8 0.0391 Exploitation Less Likely
Urgent CVE-2020-1035 Microsoft Scripting Engine Remote Code Execution 6.4 0.0325 More likely
Urgent CVE-2020-1058 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1060 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1037 Microsoft Scripting Engine Remote Code Execution 4.2 0.0224 Exploitation Less Likely
Urgent CVE-2020-1065 Microsoft Scripting Engine Remote Code Execution 4.2 0.0224 Exploitation Less Likely
Urgent CVE-2020-1056 Microsoft Edge (HTML-based) Elevation of Privilege 5.4 0.0214 Exploitation Less Likely
Urgent CVE-2020-1143 Microsoft Windows Elevation of Privilege 7.0 0.0108 More likely
Urgent CVE-2020-1135 Microsoft Graphics Component Elevation of Privilege 7.8 0.0098 More likely
High CVE-2020-1048 Microsoft Windows Elevation of Privilege 7.8 0.1650 Exploitation Less Likely
High CVE-2020-1118 Microsoft Windows Denial of Service 8.6 0.1515 Exploitation Less Likely
High CVE-2020-1108 .NET Core Denial of Service 7.5 0.0646 Exploitation Less Likely
High CVE-2020-1179 Microsoft Graphics Component Information Disclosure n/a 0.0522 Exploitation Less Likely
High CVE-2020-0909 Windows Hyper-V Denial of Service 7.5 0.0473 Exploitation Less Likely
High CVE-2020-1174 Microsoft JET Database Engine Remote Code Execution 7.8 0.0380 Exploitation Less Likely
High CVE-2020-1051 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1175 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1176 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
Showing 1 to 25 of 85 1Next