Microsoft · Security update · May 12, 2020

KB4556826: May 2020 cumulative update for Windows 10 1507

KB4556826, released May 12, 2020, fixes 56 CVEs across 10 products. One of them is being exploited (CVE-2020-1054); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
56
4 rated Critical
Exploited
1
CVE-2020-1054
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.5388
99th percentile

Priority of the 56 CVEs

Patch now 1 Urgent 9 High 33 Routine 13

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.18575
Internet Explorer 11 on Windows 10 for x64-based Systems10240.18575
Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems10240.18575
Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems10240.18575
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems10240.18575
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems10240.18575
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.18575
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.18575
Windows 10 for 32-bit Systems10240.18575
Windows 10 for x64-based Systems10240.18575

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1054 Microsoft Graphics Component Elevation of Privilege 7.0 0.5388 KEVExploited
Urgent CVE-2020-0605 .NET Framework Remote Code Execution n/a 0.1840 Exploitation Less Likely
Urgent CVE-2020-1062 Internet Explorer Remote Code Execution 6.4 0.0624 More likely
Urgent CVE-2020-1153 Microsoft Graphics Component Remote Code Execution 7.8 0.0396 Exploitation Less Likely
Urgent CVE-2020-1136 Microsoft Windows Remote Code Execution 7.8 0.0391 Exploitation Less Likely
Urgent CVE-2020-1035 Microsoft Scripting Engine Remote Code Execution 6.4 0.0325 More likely
Urgent CVE-2020-1058 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1060 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1037 Microsoft Scripting Engine Remote Code Execution 4.2 0.0224 Exploitation Less Likely
Urgent CVE-2020-1143 Microsoft Windows Elevation of Privilege 7.0 0.0108 More likely
High CVE-2020-1048 Microsoft Windows Elevation of Privilege 7.8 0.1650 Exploitation Less Likely
High CVE-2020-1108 .NET Core Denial of Service 7.5 0.0646 Exploitation Less Likely
High CVE-2020-1179 Microsoft Graphics Component Information Disclosure n/a 0.0522 Exploitation Less Likely
High CVE-2020-0909 Windows Hyper-V Denial of Service 7.5 0.0473 Exploitation Less Likely
High CVE-2020-1174 Microsoft JET Database Engine Remote Code Execution 7.8 0.0380 Exploitation Less Likely
High CVE-2020-1051 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1175 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1176 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1061 Windows Scripting Remote Code Execution 7.5 0.0335 Exploitation Less Likely
High CVE-2020-1112 Microsoft Windows Elevation of Privilege 8.5 0.0329 Exploitation Less Likely
High CVE-2020-1139 Microsoft Windows Elevation of Privilege 7.8 0.0258 Exploitation Less Likely
High CVE-2020-1156 Microsoft Windows Elevation of Privilege 7.8 0.0258 Exploitation Less Likely
High CVE-2020-1157 Microsoft Windows Elevation of Privilege 7.8 0.0258 Exploitation Less Likely
High CVE-2020-1067 Microsoft Windows Remote Code Execution 7.8 0.0254 Exploitation Less Likely
High CVE-2020-1125 Microsoft Windows Elevation of Privilege 7.0 0.0227 Exploitation Less Likely
Showing 1 to 25 of 56 1Next