Microsoft · Security update · September 8, 2020
KB4577064: September 2020 security update
KB4577064, released September 8, 2020, fixes 37 CVEs across 6 products. One of them is being exploited (CVE-2020-0878); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
37
6 rated Critical
Exploited
1
CVE-2020-0878
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.4603
98th percentile
Priority of the 37 CVEs
Patch now 1
Urgent 9
High 19
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-0878 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.0270 | KEVRansomwareExploited |
| Urgent | CVE-2020-0922 | Microsoft Windows | Remote Code Execution | 8.8 | 0.0491 | Exploitation Less Likely |
| Urgent | CVE-2020-0664 | Windows Active Directory | Information Disclosure | 6.5 | 0.0400 | More likely |
| Urgent | CVE-2020-1285 | Microsoft Graphics Component | Remote Code Execution | 8.4 | 0.0396 | Exploitation Less Likely |
| Urgent | CVE-2020-0856 | Windows Active Directory | Information Disclosure | 6.5 | 0.0390 | More likely |
| Urgent | CVE-2020-1252 | Microsoft Windows | Remote Code Execution | 7.8 | 0.0388 | Exploitation Less Likely |
| Urgent | CVE-2020-1508 | Microsoft Windows | Remote Code Execution | 7.6 | 0.0326 | Exploitation Less Likely |
| Urgent | CVE-2020-1593 | Microsoft Windows | Remote Code Execution | 7.6 | 0.0282 | Exploitation Less Likely |
| Urgent | CVE-2020-1115 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0109 | More likely |
| Urgent | CVE-2020-1245 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0083 | More likely |
| High | CVE-2020-1074 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.4603 | Exploitation Less Likely |
| High | CVE-2020-1013 | Microsoft Windows | Elevation of Privilege | 7.5 | 0.0646 | Exploitation Less Likely |
| High | CVE-2020-1031 | Windows DHCP Server | Information Disclosure | 7.5 | 0.0514 | Exploitation Less Likely |
| High | CVE-2020-0836 | Microsoft Windows DNS | Denial of Service | 7.5 | 0.0505 | Exploitation Less Likely |
| High | CVE-2020-1228 | Microsoft Windows DNS | Denial of Service | 7.5 | 0.0450 | Exploitation Less Likely |
| High | CVE-2020-1039 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.0427 | Exploitation Less Likely |
| High | CVE-2020-0718 | Windows Active Directory | Remote Code Execution | 8.8 | 0.0361 | Exploitation Less Likely |
| High | CVE-2020-0761 | Windows Active Directory | Remote Code Execution | 8.8 | 0.0361 | Exploitation Less Likely |
| High | CVE-2020-1030 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0110 | Exploitation Less Likely |
| High | CVE-2020-0911 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2020-0782 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-0838 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-0648 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0097 | Exploitation Less Likely |
| High | CVE-2020-0790 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0093 | Exploitation Less Likely |
| High | CVE-2020-1052 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0093 | Exploitation Less Likely |
Showing 1 to 25 of 37
1Next