Microsoft August 2020 Security Updates

[winchester73]

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Aug

The August 2020 security release consists of security updates for the following software:

Microsoft Windows
Microsoft Edge (EdgeHTML-based)
Microsoft Edge (Chromium-based)
Microsoft ChakraCore
Internet Explorer
Microsoft Scripting Engine
SQL Server
Microsoft JET Database Engine
.NET Framework
ASP.NET Core
Microsoft Office and Microsoft Office Services and Web Apps
Microsoft Windows Codecs Library
Microsoft Dynamics


*** Be sure to scroll to the bottom to view Known Issues.


The next Patch Tuesday is 08 September.

[Corrine]

The Microsoft August security updates have been released and consist of 120 CVEs.  Of these 120 CVEs, 17 are rated Critical and 103 are rated Important in severity.  CVE-2020-1464 - Windows Spoofing Vulnerability is both publicly known and listed as being under active attack.  CVE-2020-1380 - Scripting Engine Memory Corruption Vulnerability is also listed as being under active attack at the time of release.

See Dustin Childs review and analysis in Zero Day Initiative — The August Security Update Review.

August Security Updates Guide

[Corrine]

Update Note:  A Microsoft Security Advisory Notification was issued announcing an update to ADV990001 with information on new versions of Servicing Stack.  For information about Servicing Stack updates see Servicing Stack Updates (SSU).