Microsoft Patch Tuesday — April 2020

Exploited 4

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

• High 8.8
  CVE-2020-1020 Exploited Public exploit A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-mast…
  EPSS 65%
• High 7.8
  CVE-2020-0938 Exploited A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-mast…
  EPSS 69%
• High 7.8
  CVE-2020-1027 Exploited An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnera…
  EPSS 4.7%
• High 7.5
  CVE-2020-0968 Exploited A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …
  EPSS 31%

Critical 1

• Critical 9.8
  CVE-2020-1026 Incorrect Calculation in the MSR JavaScript Cryptography Library
  EPSS 2.6%

All vulnerabilities 113