Microsoft April 2020 Security Updates

[Corrine]

The Microsoft April security updates have been released and consist of 113 CVEs. Of these CVEs, 17 are rated Critical and 96 are rated Important in severity. Two of the bugs* One of the bugs addressed this month is listed as being under active attack, and two are listed as being public at the time of release.

The updates apply to the following:  Microsoft Windows, Microsoft Edge (EdgeHTML-based), Microsoft Edge (Chromium-based), ChakraCore, Internet Explorer, Microsoft Office and Microsoft Office Services and Web Apps, Windows Defender, Visual Studio, Microsoft Dynamics, Microsoft Apps for Android, and Microsoft Apps for Mac.

Recommended Reading:  See Dustin Childs review and analysis in Zero Day Initiative — The April 2020 Security Update Review.

April Security Updates Guide

____________
*Edit Note: Microsoft initially listed CVE-2020-0968 a being under active attack. They have since revised this bulletin to note it is not under attack

[pastywhitegurl]

For windows 10 users:  I read that some are having problems with Windows Defender virus protection being turned of an not able to reactivate.


I have my updates paused currently, so don't want to unpause if this is going on in any major way.  Is the April  update causing problems for anyone?

[winchester73]

No problems at all (then again, I think I have had only one problem in the past year), just ran a scan (attached) to confirm:

If anyone is having a problem after the update, you can't just uninstall it to get Defender to work. Instead, perform a System Restore to a date before you installed the update.

[Pete!]

No problems, but I use a third party product as my primary AV, with Defender set for "Periodic Scanning". The last Periodic Scan happened the day after I updated without a problem.

[pastywhitegurl]

If anyone is having a problem after the update, you can't just uninstall it to get Defender to work. Instead, perform a System Restore to a date before you installed the update.

This is great information. Thanks.

I run MalwareBytes Pro alongside of Defender, so I would be one of those that could experience the problem

[satrow]

For windows 10 users:  I read that some are having problems with Windows Defender virus protection being turned of an not able to reactivate.


I have my updates paused currently, so don't want to unpause if this is going on in any major way.  Is the April  update causing problems for anyone?

The problem was fixed with the signature update 1.313.1687.0.

You can manually check for updates. In Windows 10, open the Windows Security window, go to Virus & threat protection and select the Check for Updates hyperlink under Virus & Threat Protection Updates. Then the new signature file should be installed by update. For MSE, you should have Windows Update check for updates. After a long search I was offered update KB2310138 with the above signature. After installing this update the error in the MSE seems to be fixed.

https://borncity.com/win/2020/04/17/scep-mse-defender-broken-signatureupdate-kills-microsoft-antivirus-04-16-2020/

[winchester73]

Just got 1.313.1734.0

[pastywhitegurl]

The problem was fixed with the signature update 1.313.1687.0.

thanks!  I just checked and mine was updated to that version yesterday.   I clicked updates again and now its an even later version, like winchester.

Just to be sure, is it now safe to allow the April update for  Windows 10 v. 1909?

[winchester73]

Just to be sure, is it now safe to allow the April update for  Windows 10 v. 1909?

"Safe" isn't an absolute ... how 'safe' is 'safe'?

I have downloaded and installed on all of my computers.