Microsoft · Security update · November 10, 2020
KB4586805: November 2020 security update
KB4586805, released November 10, 2020, fixes 20 CVEs across 4 products. One of them is being exploited (CVE-2020-17087); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
20
2 rated Critical
Exploited
1
CVE-2020-17087
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.2710
98th percentile
Priority of the 20 CVEs
Patch now 1
Urgent 4
High 8
Routine 7
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-17087 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0543 | KEVDisclosedExploited |
| Urgent | CVE-2020-17051 | Microsoft Windows | Remote Code Execution | 9.8 | 0.1062 | More likely |
| Urgent | CVE-2020-17042 | Microsoft Windows | Remote Code Execution | 8.8 | 0.0511 | Exploitation Less Likely |
| Urgent | CVE-2020-17038 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0100 | More likely |
| Urgent | CVE-2020-17088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0088 | More likely |
| High | CVE-2020-17047 | Microsoft Windows | Denial of Service | 7.5 | 0.2710 | Exploitation Less Likely |
| High | CVE-2020-16997 | Microsoft Windows | Information Disclosure | 7.7 | 0.0403 | Exploitation Less Likely |
| High | CVE-2020-17043 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17044 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17011 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2020-17001 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-17068 | Microsoft Graphics Component | Remote Code Execution | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2020-17014 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0095 | Exploitation Less Likely |
| Routine | CVE-2020-1599 | Microsoft Windows | Spoofing | 5.5 | 0.1912 | Exploitation Less Likely |
| Routine | CVE-2020-17029 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0139 | Exploitation Less Likely |
| Routine | CVE-2020-17036 | Microsoft Windows | Information Disclosure | 5.5 | 0.0139 | Exploitation Less Likely |
| Routine | CVE-2020-17045 | Microsoft Windows | Information Disclosure | 5.5 | 0.0139 | Exploitation Less Likely |
| Routine | CVE-2020-17000 | Microsoft Windows | Information Disclosure | 5.5 | 0.0131 | Exploitation Less Likely |
| Routine | CVE-2020-17004 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0131 | Exploitation Less Likely |
| Routine | CVE-2020-17069 | Windows NDIS | Information Disclosure | 5.5 | 0.0111 | Exploitation Less Likely |
Showing 1 to 20 of 20
1