Microsoft August 2020 Security Updates

[Corrine]

The Microsoft August security updates have been released and consist of 120 CVEs. Of these 120 CVEs, 17 are rated Critical and 103 are rated Important in severity. CVE-2020-1464 - Windows Spoofing Vulnerability is both publicly known and listed as being under active attack. CVE-2020-1380 - Scripting Engine Memory Corruption Vulnerability is also listed as being under active attack at the time of release.

The updates apply to the following: Microsoft Windows, Microsoft Edge (EdgeHTML-based), Microsoft Edge (Chromium-based), Microsoft ChakraCore, Internet Explorer, Microsoft Scripting Engine, SQL Server, Microsoft JET Database Engine, .NET Framework, ASP.NET Core, Microsoft Office and Microsoft Office Services and Web Apps, Microsoft Windows Codecs Library, and Microsoft Dynamics.

See Dustin Childs review and analysis in Zero Day Initiative — The August Security Update Review.

August Security Updates Guide

 

[Corrine]

Update Note:  A Microsoft Security Advisory Notification was issued announcing an update to ADV990001 with information on new versions of Servicing Stack.  For information about Servicing Stack updates see Servicing Stack Updates (SSU).