Patch Impact Assessment April 2020

Vulnerability Assessment

1

PUBLICLY DISCLOSED

1

EXPLOITED

2

ZERO-DAY

Threatscape

Exploitability

CVE-2020-1020

CVE-2020-0969

CVE-2020-0970

CVE-2020-0927

CVE-2020-0929

CVE-2020-1026

Windows

SCHEDULE

VULNERABILITIES

7
CRITICAL

59
IMPORTANT

0
MODERATE

0
LOW

Browsers

SCHEDULE

VULNERABILITIES

2
CRITICAL

1
IMPORTANT

0
MODERATE

0
LOW

Office

PATCH NOW!

VULNERABILITIES

5
CRITICAL

22
IMPORTANT

1
MODERATE

0
LOW

Dev Tools

SCHEDULE

VULNERABILITIES

0
CRITICAL

3
IMPORTANT

0
MODERATE

0
LOW

Adobe

NO PATCHES FOR APRIL

VULNERABILITIES

0
CRITICAL

0
IMPORTANT

0
MODERATE

0
LOW

Understanding the Threatscape Report

The Readiness “Threatscape” report summarizes your risk of not applying this month’s patches, using all publicly-available vulnerability data.

It’s important to note that it’s equally important to know the risk to your applications if you DO apply this month’s patches. This is of course is dependent on:

The current state (version and build) of each platform (Windows, Office, Browser, etc.).
Which applications are part of your portfolio.

Luckily, determining the risk of applying patches is easy (and fast and dynamic, thanks to our Dynamic Platform Assessment tool.

To understand what will happen when you apply this month’s patches, contact us and assess your first 25 applications for free.

For each major platform, the pie chart shows the breakdown of vulnerabilities rated critical, important, moderate and low. These match the tables below the graph.

The size of the pie represents the total number of vulnerabilities. The larger the pie, the more vulnerabilities present.

The position of the pie on the vertical axis represents the relative risk to your application portfolio. The higher the position, the higher the exploitability.

Patch Tuesday

A Fat Windows Update for September’s Patch Tuesday

Greg Lambert September 12, 2020

Microsoft released 129 updates to its Windows ecosystem this month. The good news: we are not dealing with any zero-days or publicly reported vulnerabilities.

Written by

Greg Lambert

Assurance Dashboard

Assurance Security Dashboard September 2020

Eric Embacher September 9, 2020

Here is our Assurance Security dashboard that shows the risk associated with this month’s Patch Tuesday updates.

Written by

Eric Embacher

Patch Tuesday

A zero-day and testing of key printing features will drive August Windows updates

Greg Lambert August 15, 2020

Though a DNS-spoofing vulnerability in Windows has been rated as a zero-day, the focus for this month’s updates should be on testing key Windows features prior to deployment.

Written by

Greg Lambert

Patch Impact Assessment April 2020

Vulnerability Assessment

1

1

2

Threatscape

Exploitability

Windows

Browsers

Office

Dev Tools

Adobe

Leave a Comment Cancel Reply

Understanding the Threatscape Report

Related Posts

A Fat Windows Update for September’s Patch Tuesday

Assurance Security Dashboard September 2020

A zero-day and testing of key printing features will drive August Windows updates

Subscribe and stay current

A Fat Windows Update for September's Patch Tuesday

Assurance Security Dashboard September 2020

A zero-day and testing of key printing features will drive August Windows updates

Assurance Security Dashboard August 2020

Advisories and mitigations, oh my! Critical updates for Windows this July