Microsoft · Security update · November 10, 2020
KB4586781: November 2020 cumulative update for Windows 10 2004
KB4586781, released November 10, 2020, fixes 57 CVEs across 17 products. One of them is being exploited (CVE-2020-17087); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
57
6 rated Critical
Exploited
1
CVE-2020-17087
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.2710
98th percentile
Priority of the 57 CVEs
Patch now 1
Urgent 12
High 28
Routine 16
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-17087 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0543 | KEVDisclosedExploited |
| Urgent | CVE-2020-17051 | Microsoft Windows | Remote Code Execution | 9.8 | 0.1062 | More likely |
| Urgent | CVE-2020-17042 | Microsoft Windows | Remote Code Execution | 8.8 | 0.0511 | Exploitation Less Likely |
| Urgent | CVE-2020-17053 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.0317 | More likely |
| Urgent | CVE-2020-17058 | Microsoft Browsers | Remote Code Execution | 7.5 | 0.0309 | Exploitation Less Likely |
| Urgent | CVE-2020-17052 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.0265 | More likely |
| Urgent | CVE-2020-17057 | Microsoft Windows | Elevation of Privilege | 7.0 | 0.0187 | More likely |
| Urgent | CVE-2020-17048 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0165 | Exploitation Less Likely |
| Urgent | CVE-2020-17010 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0155 | More likely |
| Urgent | CVE-2020-17056 | Microsoft Windows | Information Disclosure | 5.5 | 0.0131 | More likely |
| Urgent | CVE-2020-17038 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0100 | More likely |
| Urgent | CVE-2020-17088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0088 | More likely |
| Urgent | CVE-2020-16998 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0085 | More likely |
| High | CVE-2020-17047 | Microsoft Windows | Denial of Service | 7.5 | 0.2710 | Exploitation Less Likely |
| High | CVE-2020-16997 | Microsoft Windows | Information Disclosure | 7.7 | 0.0403 | Exploitation Less Likely |
| High | CVE-2020-17043 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17044 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17055 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17035 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0142 | Exploitation Less Likely |
| High | CVE-2020-17011 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2020-17001 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-17024 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2020-17041 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2020-17074 | Windows Update Stack | Elevation of Privilege | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2020-17037 | Windows WalletService | Elevation of Privilege | 7.8 | 0.0098 | Exploitation Less Likely |
Showing 1 to 25 of 57
1Next