KB4586787: Windows 10 November 2020 Security Update

critical Nessus Plugin ID 142681

Language:

Synopsis

The remote Windows host is affected by multiple vulnerabilities.

Description

The Microsoft 4586787 Product is missing security updates.

 - Remote Desktop Protocol Server Information Disclosure Vulnerability (CVE-2020-16997)

 - DirectX Elevation of Privilege Vulnerability (CVE-2020-16998)

 - Windows WalletService Information Disclosure Vulnerability (CVE-2020-16999)

 - Remote Desktop Protocol Client Information Disclosure Vulnerability (CVE-2020-17000)

 - Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17014.
 (CVE-2020-17001)

 - Windows Graphics Component Information Disclosure Vulnerability (CVE-2020-17004)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044. (CVE-2020-17055)

 - Windows Network File System Information Disclosure Vulnerability (CVE-2020-17056)

 - Windows GDI+ Remote Code Execution Vulnerability (CVE-2020-17068)

 - Windows NDIS Information Disclosure Vulnerability (CVE-2020-17069)

 - Windows Delivery Optimization Information Disclosure Vulnerability (CVE-2020-17071)

 - Windows USO Core Worker Elevation of Privilege Vulnerability (CVE-2020-17075)

 - Windows Kernel Local Elevation of Privilege Vulnerability (CVE-2020-17087)

 - Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2020-17088)

 - Windows Camera Codec Information Disclosure Vulnerability (CVE-2020-17113)

 - Windows Spoofing Vulnerability (CVE-2020-1599)

 - Windows Error Reporting Elevation of Privilege Vulnerability (CVE-2020-17007)

 - Windows Port Class Library Elevation of Privilege Vulnerability (CVE-2020-17011)

 - Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17001.
 (CVE-2020-17014)

 - Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability (CVE-2020-17024)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17025)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17026)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17027)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17028)

 - Windows Canonical Display Driver Information Disclosure Vulnerability (CVE-2020-17029)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17031)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17032)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17034, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17033)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17043, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17034)

 - Windows Function Discovery SSDP Provider Information Disclosure Vulnerability (CVE-2020-17036)

 - Windows WalletService Elevation of Privilege Vulnerability (CVE-2020-17037)

 - Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17010. (CVE-2020-17038)

 - Windows Hyper-V Security Feature Bypass Vulnerability (CVE-2020-17040)

 - Windows Print Configuration Elevation of Privilege Vulnerability (CVE-2020-17041)

 - Windows Print Spooler Remote Code Execution Vulnerability (CVE-2020-17042)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17044, CVE-2020-17055. (CVE-2020-17043)

 - Windows Remote Access Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17043, CVE-2020-17055. (CVE-2020-17044)

 - Windows KernelStream Information Disclosure Vulnerability (CVE-2020-17045)

 - Windows Error Reporting Denial of Service Vulnerability (CVE-2020-17046)

 - Windows Network File System Denial of Service Vulnerability (CVE-2020-17047)

 - Scripting Engine Memory Corruption Vulnerability (CVE-2020-17052)

 - Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.
 (CVE-2020-17054)

 - Microsoft Browser Memory Corruption Vulnerability (CVE-2020-17058)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Apply Cumulative Update KB4586787.

See Also

http://www.nessus.org/u?05343312

Plugin Details

Severity: Critical

ID: 142681

File Name: smb_nt_ms20_nov_4586787.nasl

Version: 1.12

Type: local

Agent: windows

Published: 11/10/2020

Updated: 12/5/2022

Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure

Risk Information

VPR

Risk Factor: Critical

Score: 9.5

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:H/RL:OF/RC:C

CVSS Score Source: CVE-2020-17042

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:H/RL:O/RC:C

CVSS Score Source: CVE-2020-17040

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/10/2020

Vulnerability Publication Date: 11/10/2020

CISA Known Exploited Dates: 5/3/2022

Reference Information

CVE: CVE-2020-1599, CVE-2020-16997, CVE-2020-16998, CVE-2020-16999, CVE-2020-17000, CVE-2020-17001, CVE-2020-17004, CVE-2020-17007, CVE-2020-17011, CVE-2020-17014, CVE-2020-17024, CVE-2020-17025, CVE-2020-17026, CVE-2020-17027, CVE-2020-17028, CVE-2020-17029, CVE-2020-17031, CVE-2020-17032, CVE-2020-17033, CVE-2020-17034, CVE-2020-17036, CVE-2020-17037, CVE-2020-17038, CVE-2020-17040, CVE-2020-17041, CVE-2020-17042, CVE-2020-17043, CVE-2020-17044, CVE-2020-17045, CVE-2020-17046, CVE-2020-17047, CVE-2020-17052, CVE-2020-17054, CVE-2020-17055, CVE-2020-17056, CVE-2020-17058, CVE-2020-17068, CVE-2020-17069, CVE-2020-17071, CVE-2020-17075, CVE-2020-17087, CVE-2020-17088, CVE-2020-17113

MSKB: 4586787

MSFT: MS20-4586787

IAVA: 2020-A-0512-S, 2020-A-0518-S, 2020-A-0521-S

CEA-ID: CEA-2020-0135, CEA-2020-0124