Patch Tuesday Archive
Patch Tuesday April 2020
Total CVEs
115
Critical
14
Important
96
Exploited
3
Publicly Disclosed
2
All CVEs this month 115
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2020-0760 | Microsoft Office Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-0784 | DirectX Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0794 | Windows Denial of Service Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-0835 | Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Defender | - | - | - |
| CVE-2020-0895 | Windows VBScript Engine Remote Code Execution Vulnerability | Low | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0899 | Microsoft Visual Studio Elevation of Privilege Vulnerability | Important | 5.5 |
Visual Studio | - | - | - |
| CVE-2020-0906 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-0907 | Microsoft Graphics Components Remote Code Execution Vulnerability | Critical | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0910 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8.4 |
Windows Hyper-V | - | - | - |
| CVE-2020-0913 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0917 | Windows Hyper-V Elevation of Privilege Vulnerability | Important | 6.8 |
Windows Hyper-V | - | - | - |
| CVE-2020-0918 | Windows Hyper-V Elevation of Privilege Vulnerability | Important | 6.8 |
Windows Hyper-V | - | - | - |
| CVE-2020-0920 | Microsoft SharePoint Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0923 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0924 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0925 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0926 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0927 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0929 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0930 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0931 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-0932 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0933 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0935 | OneDrive for Windows Elevation of Privilege Vulnerability | Important | 5.5 |
Microsoft Office | - | Yes | - |
| CVE-2020-0944 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0945 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Windows Media | - | - | - |
| CVE-2020-0946 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Windows Media | - | - | - |
| CVE-2020-0947 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Windows Media | - | - | - |
| CVE-2020-0948 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Windows Media | - | - | - |
| CVE-2020-0949 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Windows Media | - | - | - |
| CVE-2020-0950 | Media Foundation Memory Corruption Vulnerability | Critical | 8.8 |
Windows Media | - | - | - |
| CVE-2020-0954 | Microsoft Office SharePoint XSS Vulnerability | Moderate | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0955 | Windows Kernel Information Disclosure in CPU Memory Access | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-0971 | Microsoft SharePoint Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0972 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0973 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0974 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0975 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0976 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0977 | Microsoft SharePoint Spoofing Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0978 | Microsoft Office SharePoint XSS Vulnerability | Important | 5.4 |
Microsoft Office SharePoint | - | - | - |
| CVE-2020-0979 | Microsoft Excel Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Office | - | - | - |
| CVE-2020-0980 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0985 | Windows Update Stack Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Update Stack | - | - | - |
| CVE-2020-0987 | Microsoft Graphics Component Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0988 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0991 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0992 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0993 | Windows DNS Denial of Service Vulnerability | Important | 6.5 |
Microsoft Windows DNS | - | - | - |
| CVE-2020-0994 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0995 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0996 | Windows Update Stack Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Update Stack | - | - | - |
| CVE-2020-0999 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1000 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-1001 | Windows Push Notification Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1002 | Microsoft Defender Elevation of Privilege Vulnerability | Important | 7.1 |
Windows Defender | - | - | - |
| CVE-2020-1003 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-1004 | Windows Graphics Component Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1005 | Microsoft Graphics Component Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-1006 | Windows Push Notification Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1007 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-1008 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-1018 | Microsoft Dynamics Business Central/NAV Information Disclosure | Important | 7.5 |
Microsoft Dynamics | - | - | - |
| CVE-2020-1019 | Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability | Important | 7.8 |
Apps | - | - | - |
| CVE-2020-1026 | MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability | Important | 9.8 |
Open Source Software | - | - | - |
| CVE-2020-1027 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | Yes | - | - |
| CVE-2020-1029 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0687 | Microsoft Graphics Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0699 | Win32k Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-0821 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-0888 | DirectX Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0889 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| ADV200004 | Availability of updates for Microsoft software utilizing the Autodesk FBX library | Important | - | Microsoft Office | - | - | - |
| CVE-2020-0900 | Visual Studio Extension Installer Service Elevation of Privilege Vulnerability | Important | 5.5 |
Visual Studio | - | - | - |
| CVE-2020-0919 | Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability | Important | 7.8 |
Remote Desktop Client | - | - | - |
| CVE-2020-0934 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0936 | Windows Scheduled Task Elevation of Privilege Vulnerability | Important | 7.1 |
Windows Kernel | - | - | - |
| CVE-2020-0937 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Windows Media | - | - | - |
| CVE-2020-0938 | Adobe Font Manager Library Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Graphics Component | Yes | - | - |
| CVE-2020-0939 | Media Foundation Information Disclosure Vulnerability | Important | 5.5 |
Windows Media | - | - | - |
| CVE-2020-0940 | Windows Push Notification Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0942 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important | 7.1 |
Microsoft Windows | - | - | - |
| CVE-2020-0943 | Microsoft YourPhone Application for Android Authentication Bypass Vulnerability | Important | 4.6 |
Android App | - | - | - |
| CVE-2020-0952 | Windows GDI Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0953 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0956 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0957 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-0958 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0959 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0960 | Jet Database Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft JET Database Engine | - | - | - |
| CVE-2020-0961 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-0962 | Win32k Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2020-0964 | GDI+ Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0965 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability | Critical | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0966 | VBScript Remote Code Execution Vulnerability | Low | 8.8 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0967 | VBScript Remote Code Execution Vulnerability | Moderate | 8.8 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0968 | Scripting Engine Memory Corruption Vulnerability | Moderate | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0969 | Chakra Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0970 | Scripting Engine Memory Corruption Vulnerability | Critical | 7.5 |
Microsoft Scripting Engine | - | - | - |
| CVE-2020-0981 | Windows Token Security Feature Bypass Vulnerability | Important | 8.8 |
Microsoft Windows | - | - | - |
| CVE-2020-0982 | Microsoft Graphics Component Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2020-0983 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Update Stack | - | - | - |
| CVE-2020-0984 | Microsoft (MAU) Office Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Office | - | - | - |
| CVE-2020-1009 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1011 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1014 | Microsoft Windows Update Client Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Update Stack | - | - | - |
| CVE-2020-1015 | Windows Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2020-1016 | Windows Push Notification Service Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Windows | - | - | - |
| CVE-2020-1017 | Windows Push Notification Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| CVE-2020-1020 | Adobe Font Manager Library Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Graphics Component | Yes | Yes | - |
| CVE-2020-1022 | Dynamics Business Central Remote Code Execution Vulnerability | Critical | 8 |
Microsoft Dynamics | - | - | - |
| CVE-2020-1049 | Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2020-1094 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Windows | - | - | - |
| ADV200007 | OpenSSL Remote Denial of Service Vulnerability | Important | - | Open Source Software | - | - | - |
| CVE-2020-1050 | Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability | Important | 6.1 |
Microsoft Dynamics | - | - | - |
Threat Categories 6
| Threat Category | CVEs | Critical |
|---|---|---|
| Remote Code Execution | 40 | 14 |
| Elevation of Privilege | 38 | - |
| Information Disclosure | 17 | - |
| Spoofing | 15 | - |
| Denial of Service | 3 | - |
| Security Feature Bypass | 2 | - |
Affected Products 18
| Product | CVEs | Exploited |
|---|---|---|
| Microsoft Office SharePoint | 19 | - |
| Microsoft Windows | 15 | - |
| Windows Kernel | 14 | 1 |
| Microsoft Graphics Component | 12 | 2 |
| Microsoft JET Database Engine | 10 | - |
| Microsoft Office | 10 | - |
| Windows Media | 8 | - |
| Microsoft Scripting Engine | 6 | - |
| Microsoft Dynamics | 4 | - |
| Windows Update Stack | 4 | - |
| Windows Hyper-V | 3 | - |
| Open Source Software | 2 | - |
| Visual Studio | 2 | - |
| Windows Defender | 2 | - |
| Android App | 1 | - |
| Apps | 1 | - |
| Microsoft Windows DNS | 1 | - |
| Remote Desktop Client | 1 | - |