Microsoft · Security update · October 13, 2020

KB4579980: October 2020 security update

KB4579980, released October 13, 2020, fixes 2 CVEs across 6 products. One of them is being exploited (CVE-2020-1147); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
2
1 rated Critical
Exploited
1
CVE-2020-1147
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9580
99th percentile

Priority of the 2 CVEs

Patch now 1 Urgent 0 High 0 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2020-1147 .NET Framework Remote Code Execution 8.8 0.9580 KEVExploited
Routine CVE-2020-16937 .NET Framework Information Disclosure 4.7 0.0329 DisclosedExploitation Less Likely
Showing 1 to 2 of 2 1