Microsoft notes that exploitation of this vulnerability is less likely, but these patches should still be prioritized for all Hyper-V systems. Hyper-V Hypervisor EscapeĪ remote code execution vulnerability ( CVE-2020-0910) is patched in Hyper-V that would allow an authenticated user on a guest system to run arbitrary code on the host system. While Windows 10 systems are partially mitigated against the exploit, all Windows workstations should be prioritized for patching. Microsoft patched two Actively Attacked vulnerabilities ( CVE-2020-0938, CVE-2020-1020) in the Adobe Font Manager Library that were announced in March. This patch should be prioritized across all Windows devices. Often privilege escalation vulnerabilities are “chained” with other vulnerabilities resulting in a full system compromise.

While listed as Important, there is also an Actively Attacked privilege escalation vulnerability ( CVE-2020-1027) in the Windows Kernel.

This includes multi-user servers that are used as remote desktops for users. The Scripting Engine, Adobe Font Manager Library, Media Foundation, Microsoft Graphics, and Windows Codecs patches should be prioritized for workstation-type devices, meaning any system that is used for email or to access the internet via a browser.

Adobe released patches today for ColdFusion, After Effects, and Digital Editions.

The 19 Critical vulnerabilities cover Adobe Font Manager Library (0-day), SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business Central. This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical.

Adobe coldfusion blog