Microsoft · Security update · August 11, 2020

KB4571709: August 2020 cumulative update for Windows 10 1803

KB4571709, released August 11, 2020, fixes 85 CVEs across 15 products. 2 of them are being exploited (CVE-2020-1464); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
85
12 rated Critical
Exploited
2
CVE-2020-1464
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.3895
98th percentile

Priority of the 85 CVEs

Patch now 2 Urgent 17 High 58 Routine 8

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.1667
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems17134.1667
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.1667
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems17134.1667
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems17134.1667
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems17134.1667
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems17134.1667
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for ARM64-based Systems17134.1667
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems17134.1667
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.1667
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems17134.1667
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.1667
Windows 10 Version 1803 for 32-bit Systems17134.1667
Windows 10 Version 1803 for ARM64-based Systems17134.1667
Windows 10 Version 1803 for x64-based Systems17134.1667

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1464 Microsoft Windows Spoofing 5.3 0.3895 KEVDisclosedExploited
Patch now CVE-2020-1380 Microsoft Scripting Engine Remote Code Execution 7.5 0.2419 KEVExploited
Urgent CVE-2020-1570 Microsoft Scripting Engine Remote Code Execution 7.5 0.0884 More likely
Urgent CVE-2020-1555 Microsoft Scripting Engine Remote Code Execution n/a 0.0451 Exploitation Less Likely
Urgent CVE-2020-1046 .NET Framework Remote Code Execution n/a 0.0376 Exploitation Less Likely
Urgent CVE-2020-1567 Internet Explorer Remote Code Execution 7.5 0.0367 More likely
Urgent CVE-2020-1554 Windows Media Remote Code Execution 8.0 0.0346 Exploitation Less Likely
Urgent CVE-2020-1492 Microsoft Video Control Remote Code Execution 7.8 0.0346 Exploitation Less Likely
Urgent CVE-2020-1339 Windows Media Remote Code Execution 7.3 0.0332 Exploitation Less Likely
Urgent CVE-2020-1379 Windows Media Remote Code Execution 7.8 0.0331 Exploitation Less Likely
Urgent CVE-2020-1568 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.0311 Exploitation Less Likely
Urgent CVE-2020-1525 Windows Media Remote Code Execution 7.8 0.0285 Exploitation Less Likely
Urgent CVE-2020-1477 Windows Media Player Remote Code Execution 7.8 0.0251 Exploitation Less Likely
Urgent CVE-2020-1566 Microsoft Windows Elevation of Privilege n/a 0.0168 More likely
Urgent CVE-2020-1578 Windows Kernel Information Disclosure 5.5 0.0094 More likely
Urgent CVE-2020-1480 Microsoft Windows Elevation of Privilege 7.8 0.0090 More likely
Urgent CVE-2020-1529 Microsoft Graphics Component Elevation of Privilege 7.8 0.0090 More likely
Urgent CVE-2020-1584 Microsoft Windows Elevation of Privilege 7.8 0.0090 More likely
Urgent CVE-2020-1587 Microsoft Windows Elevation of Privilege 7.8 0.0086 More likely
High CVE-2020-1337 Windows Print Spooler Components Elevation of Privilege 7.8 0.1418 Exploitation Less Likely
High CVE-2020-1561 Microsoft Graphics Component Remote Code Execution 7.8 0.0426 Exploitation Less Likely
High CVE-2020-1558 Microsoft JET Database Engine Remote Code Execution n/a 0.0418 Exploitation Less Likely
High CVE-2020-1562 Microsoft Graphics Component Remote Code Execution 7.8 0.0403 Exploitation Less Likely
High CVE-2020-1564 Microsoft JET Database Engine Remote Code Execution n/a 0.0403 Exploitation Less Likely
High CVE-2020-1557 Microsoft JET Database Engine Remote Code Execution n/a 0.0393 Exploitation Less Likely
Showing 1 to 25 of 85 1Next