Microsoft · Security update · November 10, 2020
KB4586817: November 2020 security update
KB4586817, released November 10, 2020, fixes 14 CVEs across 4 products. One of them is being exploited (CVE-2020-17087); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
14
2 rated Critical
Exploited
1
CVE-2020-17087
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.1912
97th percentile
Priority of the 14 CVEs
Patch now 1
Urgent 3
High 5
Routine 5
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-17087 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0543 | KEVDisclosedExploited |
| Urgent | CVE-2020-17051 | Microsoft Windows | Remote Code Execution | 9.8 | 0.1062 | More likely |
| Urgent | CVE-2020-17042 | Microsoft Windows | Remote Code Execution | 8.8 | 0.0511 | Exploitation Less Likely |
| Urgent | CVE-2020-17088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0088 | More likely |
| High | CVE-2020-17043 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17011 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2020-17001 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-17068 | Microsoft Graphics Component | Remote Code Execution | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2020-17014 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0095 | Exploitation Less Likely |
| Routine | CVE-2020-1599 | Microsoft Windows | Spoofing | 5.5 | 0.1912 | Exploitation Less Likely |
| Routine | CVE-2020-17036 | Microsoft Windows | Information Disclosure | 5.5 | 0.0139 | Exploitation Less Likely |
| Routine | CVE-2020-17045 | Microsoft Windows | Information Disclosure | 5.5 | 0.0139 | Exploitation Less Likely |
| Routine | CVE-2020-17004 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0131 | Exploitation Less Likely |
| Routine | CVE-2020-17069 | Windows NDIS | Information Disclosure | 5.5 | 0.0111 | Exploitation Less Likely |
Showing 1 to 14 of 14
1