Microsoft · Security update · May 12, 2020

KB4556840: May 2020 security update

KB4556840, released May 12, 2020, fixes 34 CVEs across 3 products. One of them is being exploited (CVE-2020-1054); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
34
1 rated Critical
Exploited
1
CVE-2020-1054
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.5388
99th percentile

Priority of the 34 CVEs

Patch now 1 Urgent 6 High 17 Routine 10

Applies to

Product
Internet Explorer 11 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1054 Microsoft Graphics Component Elevation of Privilege 7.0 0.5388 KEVExploited
Urgent CVE-2020-1062 Internet Explorer Remote Code Execution 6.4 0.0624 More likely
Urgent CVE-2020-1153 Microsoft Graphics Component Remote Code Execution 7.8 0.0396 Exploitation Less Likely
Urgent CVE-2020-1035 Microsoft Scripting Engine Remote Code Execution 6.4 0.0325 More likely
Urgent CVE-2020-1058 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1060 Microsoft Scripting Engine Remote Code Execution 6.4 0.0318 More likely
Urgent CVE-2020-1143 Microsoft Windows Elevation of Privilege 7.0 0.0108 More likely
High CVE-2020-1048 Microsoft Windows Elevation of Privilege 7.8 0.1650 Exploitation Less Likely
High CVE-2020-1179 Microsoft Graphics Component Information Disclosure n/a 0.0522 Exploitation Less Likely
High CVE-2020-0909 Windows Hyper-V Denial of Service 7.5 0.0473 Exploitation Less Likely
High CVE-2020-1174 Microsoft JET Database Engine Remote Code Execution 7.8 0.0380 Exploitation Less Likely
High CVE-2020-1051 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1175 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1176 Microsoft JET Database Engine Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2020-1061 Windows Scripting Remote Code Execution 7.5 0.0335 Exploitation Less Likely
High CVE-2020-1112 Microsoft Windows Elevation of Privilege 8.5 0.0329 Exploitation Less Likely
High CVE-2020-1067 Microsoft Windows Remote Code Execution 7.8 0.0254 Exploitation Less Likely
High CVE-2020-1070 Microsoft Windows Elevation of Privilege 7.8 0.0115 Exploitation Less Likely
High CVE-2020-1079 Microsoft Windows Elevation of Privilege 7.8 0.0099 Exploitation Less Likely
High CVE-2020-1010 Microsoft Windows Elevation of Privilege 7.8 0.0098 Exploitation Less Likely
High CVE-2020-1081 Microsoft Windows Elevation of Privilege 7.8 0.0095 Exploitation Less Likely
High CVE-2020-1114 Windows Kernel Elevation of Privilege 7.8 0.0095 Exploitation Less Likely
High CVE-2020-1154 Common Log File System Driver Elevation of Privilege 7.8 0.0095 Exploitation Less Likely
High CVE-2020-1078 Microsoft Windows Elevation of Privilege 7.8 0.0084 Exploitation Less Likely
Routine CVE-2020-1113 Windows Task Scheduler Security Feature Bypass 5.3 0.0631 Exploitation Less Likely
Showing 1 to 25 of 34 1Next