Advisory Microsoft Updates – April 2020 aeCERT One of Telecommunications Regulatory Authority (TRA) Initiatives P O Box 116688, Dubai, United Arab Emirates (UAE) www.aecert.ae | www.tra.gov.ae Version: 1.0 Ref: ADV-20-032 Document Date: 15/04/2020 Document Details Disclaimer Whilst every effort has been made to ensure the accuracy of the information contained within this report, aeCERT and the TRA bear no liability or responsibility for any recommendations issued or inadvertent damages that could be caused by the recipient of this information. Accessing third-party links in this advisory will direct you to an external website. Please note that aeCERT bears no responsibility for third-party website traffic. aeCERT will have no liability to the entities for the content or use of the content available through the hyperlinks that are referenced. Contents Contents 1 Summary 2 Details 2 Recommendations 11 References 11 1 | P a g e Summary aeCERT has received the latest Microsoft security updates that aim to patch recent vulnerabilities discovered in their system. The release has an impact on some of Microsoft’s products. In order to protect windows from security risks, users should patch their systems as soon as possible. Details Microsoft has released the monthly security updates for the month of April. This update discloses different vulnerabilities present in many of Microsoft’s products. This patch is related to 113 vulnerabilities with three of them being zero-day vulnerabilities: • 15 of the vulnerabilities are considered critical. • 93 are considered important. • 3 are considered moderate. • 2 are considered low. The two zero-day vulnerabilities that are currently being seen actively exploited in attacks are as follows: • CVE-2020-0938 - Adobe Font Manager Library Remote Code Execution Vulnerability • CVE-2020-1020 - Adobe Font Manager Library Remote Code Execution Vulnerability The two zero-day vulnerabilities that have been publicly disclosed are as follows: • CVE-2020-0935 - OneDrive for Windows Elevation of Privilege Vulnerability • CVE-2020-1020 - Adobe Font Manager Library Remote Code Execution Vulnerability Further information about zero-day vulnerabilities can be found here. 2 | P a g e The table below illustrates a list of resolved vulnerabilities for April 2020’s Patch Tuesday Microsoft updates. Tag CVE ID CVE Title Severity Android App CVE-2020-0943 Microsoft YourPhone Application for Android Important Authentication Bypass Vulnerability Apps CVE-2020-1019 Microsoft RMS Sharing App for Mac Elevation of Important Privilege Vulnerability Microsoft CVE-2020-1050 Microsoft Dynamics 365 (On-Premise) Cross Site Important Dynamics Scripting Vulnerability Microsoft CVE-2020-1018 Microsoft Dynamics Business Central/NAV Information Important Dynamics Disclosure Microsoft CVE-2020-1049 Microsoft Dynamics 365 (On-Premise) Cross Site Important Dynamics Scripting Vulnerability Microsoft CVE-2020-1022 Dynamics Business Central Remote Code Execution Critical Dynamics Vulnerability Microsoft CVE-2020-0952 Windows GDI Information Disclosure Vulnerability Important Graphics Component Microsoft CVE-2020-0938 Adobe Font Manager Library Remote Code Execution Important Graphics Vulnerability Component Microsoft CVE-2020-0687 Microsoft Graphics Remote Code Execution Critical Graphics Vulnerability Component 3 | P a g e Microsoft CVE-2020-0987 Microsoft Graphics Component Information Disclosure Important Graphics Vulnerability Component Microsoft CVE-2020-1004 Windows Graphics Component Elevation of Privilege Important Graphics Vulnerability Component Microsoft CVE-2020-1005 Microsoft Graphics Component Information Disclosure Important Graphics Vulnerability Component Microsoft CVE-2020-0958 Win32k Elevation of Privilege Vulnerability Important Graphics Component Microsoft CVE-2020-0907 Microsoft Graphics Components Remote Code Critical Graphics Execution Vulnerability Component Microsoft CVE-2020-0982 Microsoft Graphics Component Information Disclosure Important Graphics Vulnerability Component Microsoft CVE-2020-0964 GDI+ Remote Code Execution Vulnerability Important Graphics Component Microsoft CVE-2020-1020 Adobe Font Manager Library Remote Code Execution Important Graphics Vulnerability Component Microsoft CVE-2020-0784 DirectX Elevation of Privilege Vulnerability Important Graphics Component Microsoft JET CVE-2020-0995 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability 4 | P a g e Microsoft JET CVE-2020-0999 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0988 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0992 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0994 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0953 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0889 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0959 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-0960 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft JET CVE-2020-1008 Jet Database Engine Remote Code Execution Important Database Engine Vulnerability Microsoft Office CVE-2020-0979 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office CVE-2020-0980 Microsoft Word Remote Code Execution Vulnerability Important Microsoft Office CVE-2020-0984 Microsoft (MAU) Office Elevation of Privilege Important Vulnerability Microsoft Office CVE-2020-0760 Microsoft Office Remote Code Execution Vulnerability Important Microsoft Office CVE-2020-0991 Microsoft Office Remote Code Execution Vulnerability Important Microsoft Office CVE-2020-0961 Microsoft Office Access Connectivity Engine Remote Important Code Execution Vulnerability 5 | P a g e Microsoft Office CVE-2020-0931 Microsoft SharePoint Remote Code Execution Critical Vulnerability Microsoft Office CVE-2020-0906 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office CVE-2020-0935 OneDrive for Windows Elevation of Privilege Important Vulnerability Microsoft Office CVE-2020-0927 Microsoft Office SharePoint XSS Vulnerability Critical SharePoint Microsoft Office CVE-2020-0923 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0925 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0924 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0932 Microsoft SharePoint Remote Code Execution Critical SharePoint Vulnerability Microsoft Office CVE-2020-0930 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0933 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0920 Microsoft SharePoint Remote Code Execution Important SharePoint Vulnerability Microsoft Office CVE-2020-0929 Microsoft SharePoint Remote Code Execution Critical SharePoint Vulnerability Microsoft Office CVE-2020-0971 Microsoft SharePoint Remote Code Execution Important SharePoint Vulnerability Microsoft Office CVE-2020-0975 Microsoft SharePoint Spoofing Vulnerability Important SharePoint 6 | P a g e Microsoft Office CVE-2020-0978 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0977 Microsoft SharePoint Spoofing Vulnerability Important SharePoint Microsoft Office CVE-2020-0976 Microsoft SharePoint Spoofing Vulnerability Important SharePoint Microsoft Office CVE-2020-0974 Microsoft SharePoint Remote Code Execution Critical SharePoint Vulnerability Microsoft Office CVE-2020-0973 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft Office CVE-2020-0972 Microsoft SharePoint Spoofing Vulnerability Important SharePoint Microsoft Office CVE-2020-0954 Microsoft Office SharePoint XSS Vulnerability Moderate SharePoint Microsoft Office CVE-2020-0926 Microsoft Office SharePoint XSS Vulnerability Important SharePoint Microsoft CVE-2020-0968 Scripting Engine Memory Corruption Vulnerability Moderate Scripting Engine Microsoft CVE-2020-0966 VBScript Remote Code Execution Vulnerability Low Scripting Engine Microsoft CVE-2020-0895 Windows VBScript Engine Remote Code Execution Low Scripting Engine Vulnerability Microsoft CVE-2020-0969 Chakra Scripting Engine Memory Corruption Critical Scripting Engine Vulnerability Microsoft CVE-2020-0970 Scripting Engine Memory Corruption Vulnerability Critical Scripting Engine 7 | P a g e Microsoft CVE-2020-0967 VBScript Remote Code Execution Vulnerability Moderate Scripting Engine Microsoft CVE-2020-0942 Connected User Experiences and Telemetry Service Important Windows Elevation of Privilege Vulnerability Microsoft CVE-2020-0965 Microsoft Windows Codecs Library Remote Code Critical Windows Execution Vulnerability Microsoft CVE-2020-0940 Windows Push Notification Service Elevation of Important Windows Privilege Vulnerability Microsoft CVE-2020-0934 Windows Elevation of Privilege Vulnerability Important Windows Microsoft CVE-2020-1029 Connected User Experiences and Telemetry Service Important Windows Elevation of Privilege Vulnerability Microsoft CVE-2020-1011 Windows Elevation of Privilege Vulnerability Important Windows Microsoft CVE-2020-1094 Windows Work Folder Service