Microsoft Patch Tuesday, May 2020 Edition
Summary: Microsoft's May 2020 Patch Tuesday fixed at least 111 security holes in Windows and Windows-based programs, with 16 labeled Critical and at least 56 elevation-of-privilege fixes, and none labeled as publicly exploited or detailed before release. Ivanti's Todd Schell noted that seven of the ten fixes at higher risk of exploit carried only the Important rating, and Tenable's Satnam Narang pointed to three elevation-of-privilege flaws rated Exploitation More Likely in Win32k (CVE-2020-1054, CVE-2020-1143) and the Windows Graphics Component (CVE-2020-1135).
What's compelling: Seven of the ten fixes Microsoft judged most likely to be exploited were rated Important, not Critical, so a patch queue that stops at vendor severity or a CVSS threshold would leave the flaws attackers are most likely to use sitting unpatched.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-1054CVE-2020-1117CVE-2020-1126CVE-2020-1135CVE-2020-1143
- Related
- CVE-2020-1054: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026