KLA11743 Multiple vulnerabilities in Microsoft products (ESU)

🗓️ 14 Apr 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 116 Views

Multiple vulnerabilities in Microsoft products (ESU). Remote code execution, information disclosure, privilege elevation, and denial of service vulnerabilities found in various components. Detailed list includes Scripting Engine, Microsoft Graphics Component, Jet Database Engine, Win32k, Windows Kernel, GDI+, VBScript, Windows Update Client, Media Foundation, Windows Work Folder Service, Windows Graphics Component, Windows DNS, Adobe Font Manager Library, and CPU Memory Access

Reporter	Title	Published	Views	Family All 428
attackerkb	CVE-2020-0968	15 Apr 202000:00	–	attackerkb
attackerkb	CVE-2020-1015	15 Apr 202000:00	–	attackerkb
attackerkb	CVE-2020-1094	15 Apr 202000:00	–	attackerkb
attackerkb	CVE-2020-0970	15 Apr 202000:00	–	attackerkb
attackerkb	CVE-2020-1027	15 Apr 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
GithubExploit	Exploit for CVE-2020-1015	13 May 202016:42	–	githubexploit
BDU FSTEC	The vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Graphics Components in the Windows operating system allows a hacker to execute arbitrary code.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.	7 May 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0968
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0987
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0982
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0889
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0960
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0962
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1007
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0964
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0965
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0988

27 Jun 2026 00:00Current

9.6Critical risk

Vulners AI Score9.6

CVSS 3.17.5 - 8.8

CVSS 29.3

EPSS0.30676

SSVC