Microsoft · Security update · November 10, 2020
KB4586845: November 2020 security update
KB4586845, released November 10, 2020, fixes 34 CVEs across 9 products. One of them is being exploited (CVE-2020-17087); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
34
3 rated Critical
Exploited
1
CVE-2020-17087
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.2710
98th percentile
Priority of the 34 CVEs
Patch now 1
Urgent 6
High 19
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2020-17087 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0543 | KEVDisclosedExploited |
| Urgent | CVE-2020-17051 | Microsoft Windows | Remote Code Execution | 9.8 | 0.1062 | More likely |
| Urgent | CVE-2020-17042 | Microsoft Windows | Remote Code Execution | 8.8 | 0.0511 | Exploitation Less Likely |
| Urgent | CVE-2020-17052 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.0265 | More likely |
| Urgent | CVE-2020-17056 | Microsoft Windows | Information Disclosure | 5.5 | 0.0131 | More likely |
| Urgent | CVE-2020-17038 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0100 | More likely |
| Urgent | CVE-2020-17088 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0088 | More likely |
| High | CVE-2020-17047 | Microsoft Windows | Denial of Service | 7.5 | 0.2710 | Exploitation Less Likely |
| High | CVE-2020-16997 | Microsoft Windows | Information Disclosure | 7.7 | 0.0403 | Exploitation Less Likely |
| High | CVE-2020-17043 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17044 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17055 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0285 | Exploitation Less Likely |
| High | CVE-2020-17011 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2020-17001 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0100 | Exploitation Less Likely |
| High | CVE-2020-17024 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2020-17041 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2020-17068 | Microsoft Graphics Component | Remote Code Execution | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2020-17014 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0095 | Exploitation Less Likely |
| High | CVE-2020-17026 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0093 | Exploitation Less Likely |
| High | CVE-2020-17027 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0092 | Exploitation Less Likely |
| High | CVE-2020-17031 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0092 | Exploitation Less Likely |
| High | CVE-2020-17034 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0092 | Exploitation Less Likely |
| High | CVE-2020-17025 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2020-17028 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2020-17032 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.0091 | Exploitation Less Likely |
Showing 1 to 25 of 34
1Next