Microsoft Server security updates, May 2020 (Patch Tuesday 2020-05-12)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in May 2020, including the Patch Tuesday release on 2020-05-12 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 58
Critical: 0
High: 35
In CISA KEV: 1
CVEs: 58

Microsoft server CVEs, May 2020

May 21, 2020
High [CVE-2020-1190] Windows State Repository Service Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1176] Jet Database Engine Remote Code Execution Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1166] Windows Clipboard Service Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1164] Windows Runtime Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1154] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1155] Windows Runtime Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1153] Microsoft Graphics Components Remote Code Execution Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1149] Windows Runtime Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1150] Media Foundation Memory Corruption Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1143] Win32k Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1142] Windows GDI Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1140] DirectX Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1137] Windows Push Notification Service Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1138] Windows Storage Service Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1135] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1136] Media Foundation Memory Corruption Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1132] Windows Error Reporting Manager Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1126] Media Foundation Memory Corruption Vulnerability
High8.8
May 21, 2020
High [CVE-2020-1121] Windows Clipboard Service Elevation of Privilege Vulnerability
High7.0
May 21, 2020
High [CVE-2020-1118] Microsoft Windows Transport Layer Security Denial of Service Vulnerability
High8.6
May 21, 2020
High [CVE-2020-1117] Microsoft Color Management Remote Code Execution Vulnerability
High8.8
May 21, 2020
High [CVE-2020-1114] Windows Kernel Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1112] Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability
High8.5
May 21, 2020
High [CVE-2020-1110] Windows Update Stack Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1087] Windows Kernel Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1088] Windows Error Reporting Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1079] Microsoft Windows Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1081] Windows Printer Service Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1078] Windows Installer Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1070] Windows Print Spooler Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1067] Windows Remote Code Execution Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1068] Microsoft Windows Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-1061] Microsoft Script Runtime Remote Code Execution Vulnerability
High7.5
May 21, 2020
High [CVE-2020-1010] Microsoft Windows Elevation of Privilege Vulnerability
High7.8
May 21, 2020
High [CVE-2020-0909] Windows Hyper-V Denial of Service Vulnerability
High7.5
May 21, 2020
Medium [CVE-2020-1145] Windows GDI Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1141] Windows GDI Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1123] Connected User Experiences and Telemetry Service Denial of Service Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1116] Windows CSRSS Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1113] Windows Task Scheduler Security Feature Bypass Vulnerability
Medium5.3
May 21, 2020
Medium [CVE-2020-1084] Connected User Experiences and Telemetry Service Denial of Service Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1076] Windows Denial of Service Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1075] Windows Subsystem for Linux Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1071] Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
Medium6.8
May 21, 2020
Medium [CVE-2020-1072] Windows Kernel Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-1055] Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability
Medium5.5
May 21, 2020
Medium [CVE-2020-0963] Windows GDI Information Disclosure Vulnerability
Medium5.5
May 21, 2020
Advisory [CVE-2020-1179] Windows GDI Information Disclosure Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1107] Microsoft SharePoint Spoofing Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1105] Microsoft SharePoint Spoofing Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1106] Microsoft Office SharePoint XSS Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1103] Microsoft SharePoint Information Disclosure Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1104] Microsoft SharePoint Spoofing Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1102] Microsoft SharePoint Remote Code Execution Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1099] Microsoft Office SharePoint XSS Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1100] Microsoft Office SharePoint XSS Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1069] Microsoft SharePoint Server Remote Code Execution Vulnerability
Unrated
May 21, 2020
Advisory [CVE-2020-1023] Microsoft SharePoint Remote Code Execution Vulnerability
Unrated

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.