126 CVEs fixed during the November Patch Tuesday updates

News » Security » Patch Tuesday

Reading time icon 3 min. read

Calendar icon Published on

by Milan Stanojevic 

published on

Share this article

Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more

Key notes

  • No less than 126 CVEs are brought into discussion during the November Patch Tuesday updates.
  • These CVEs are related to common vulnerabilities and exposures found in Microsoft and Adobe.
  • To keep your PC secure, don’t hesitate to take a look at our Security & Privacy section as well.
  • Find all about Microsoft's scheduled security fix release on every second Tuesday of a month from our Patch Tuesday Hub.
Patch Tuesday

Microsoft’s scheduled release of the latest security fixes for its Windows operating system and software applications brings countless new fixes and tweaks for Windows 10 users this month.

Quite a few cybersecurity incidents took place in 2020. Therefore, there is no surprise that the November Patch Tuesday updates include dozens of security enhancements.

Take a closer look at this quick rundown on the number of CVEs that have been tracked down this year:

Vulnerabilities identified this month

As usual, Microsoft products present the highest number of vulnerabilities, with 112 found out of the total 126, the remaining 14 being related to Adobe products.

Vulnerabilities found in Adobe products

This month’s vulnerabilities were identified for the following Adobe products: Acrobat and Reader.

Four of these CVEs were rated as Critical and could lead to code execution if a user opened a specially crafted PDF.

Vulnerabilities found in Microsoft products

As expected, quite a few Microsoft products were affected by vulnerabilities. These include products like Microsoft Windows, Office and Office Services and Web Apps, Internet Explorer, Edge (EdgeHTML-based and Chromium-based), Microsoft Teams, Exchange Server, Microsoft Dynamics, Azure Sphere, Windows Defender, Visual Studio, and ChakraCore.

Of these 112 patches, 17 were rated as Critical, 93 were rated as Important, and 2 were considered Low in severity.

Which were some of the most severe CVEs?

Of the 126 discovered vulnerabilities, here are those that stood out more than the others:

  • CVE-2020-17087 – Windows Kernel Local Elevation of Privilege Vulnerability
  • CVE-2020-17084 – Microsoft Exchange Server Remote Code Execution Vulnerability
  • CVE-2020-17051 – Windows Network File System Remote Code Execution Vulnerability
  • CVE-2020-17040 – Windows Hyper-V Security Feature Bypass Vulnerability

Keep in mind that updating your PC is essential when it comes to getting the latest fixes and helping it run efficiently.

In fact, Patch Tuesday updates are far more important than all other regular updates. If you still don’t know how Patch Tuesday works, you’ll find all the answers you’re looking for in this dedicated guide.

For a complete list of all identified CVEs for the November Patch Tuesday updates, also take your time to check out this useful article.

If you are worried about other vulnerabilities that haven’t yet been covered this month, rest assured that they will most likely be fixed by the next Patch Tuesday updates. Keep an eye on us for fresh info.

[wl_navigator]

More about the topics: patch tuesday, windows 10 updates

Milan Stanojevic

Milan Stanojevic Shield

Windows Toubleshooting Expert

Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He's a PC enthusiast and he spends most of his time learning about computers and technology. Before joining WindowsReport, he worked as a front-end web developer. Now, he's one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.

User forum

0 messages