Microsoft Fixes 99 Vulnerabilities
The February 2020 Microsoft Patch Tuesday security updates have arrived. Microsoft released fixes for 99 CVE-numbered vulnerabilities, 12 of which are classified as critical vulnerabilities.
Microsoft had one of its largest patch bundles, as the tech giant released fixes for 99 CVE-listed vulnerabilities. The good news in all of this is that updating OS, browsers, and Office will resolve most of your vulnerabilities from the Microsoft side.
Five of the bugs are listed as publicly known at the time of release, four of which are important in severity and one critical IE vulnerability that is also listed as under active attack.
Internet Explorer Zero-day Vulnerability
A critical vulnerability found in Internet Explorer (CVE-2020-0674) has been publicly disclosed and is currently being exploited in the wild.
Microsoft warned about this zero-day vulnerability in Internet Explorer (IE) browser last month, but fixes have officially been rolled out only on this month’s Patch Tuesday.
This Scripting Engine Memory Corruption Vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
ESUs for Windows 7, Server 2008 and 2008 R2
Windows 7, Server 2008 and 2008 R2 Extended Security Updates are still being documented publicly, which is likely to cause some confusion. Bummer: this doesn’t mean that everyone has access. You do need to meet certain criteria, which Microsoft has lined out in their Windows 7 ESU frequently asked questions.
Run the February 2020 Patch Tuesday Audit Report
Similar to previous months, we’ve created an Audit Report that checks if the assets in your network are on the latest Microsoft patch update. It’s color-coded to give you an easy and quick overview of which assets are already on the latest Windows update, and which ones still need to be patched. All admins are advised to install these security updates as soon as possible to protect Windows from security risks.
If you haven’t already, start your free trial of Lansweeper to run the Microsoft Patch Tuesday Report. Make sure to subscribe via the form below if you want to receive the latest Microsoft Patch reports and bonus network reports.
Overview: February 2020 Security Updates
Below is the full list of all vulnerabilities and released advisories in the February 2020 Patch Tuesday updates.
| Affected Product | CVE Code | CVE Title | Severity |
|---|---|---|---|
| Adobe Flash Player | ADV200003 | February 2020 Adobe Flash Security Update | Important |
| Internet Explorer | CVE-2020-0674 | Scripting Engine Memory Corruption Vulnerability | Moderate |
| Internet Explorer | CVE-2020-0673 | Scripting Engine Memory Corruption Vulnerability | Moderate |
| Microsoft Edge | CVE-2020-0663 | Microsoft Edge Elevation of Privilege Vulnerability | Important |
| Microsoft Edge | CVE-2020-0706 | Microsoft Browser Information Disclosure Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0692 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0688 | Microsoft Exchange Memory Corruption Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0696 | Microsoft Outlook Security Feature Bypass Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0744 | Windows GDI Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0745 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0714 | DirectX Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0715 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0746 | Microsoft Graphics Components Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0709 | DirectX Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0792 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Malware Protection Engine | CVE-2020-0733 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability | Important |
| Microsoft Office | CVE-2020-0697 | Microsoft Office Tampering Vulnerability | Important |
| Microsoft Office | CVE-2020-0759 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2020-0695 | Microsoft Office Online Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2020-0694 | Microsoft Office SharePoint XSS Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2020-0693 | Microsoft Office SharePoint XSS Vulnerability | Important |
| Microsoft Scripting Engine | CVE-2020-0713 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0711 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0710 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0712 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0767 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Windows | CVE-2020-0741 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0742 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0740 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0658 | Windows Common Log File System Driver Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0737 | Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0659 | Windows Data Sharing Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0739 | Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0757 | Windows SSH Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0732 | DirectX Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0753 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0755 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0754 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0657 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0667 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0743 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0666 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0748 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0747 | Windows Data Sharing Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0668 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0704 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0685 | Windows COM Server Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0676 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0678 | Windows Error Reporting Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0703 | Windows Backup Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0680 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0679 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0681 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Microsoft Windows | CVE-2020-0677 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0682 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0756 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0670 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0675 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0669 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0727 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0671 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0672 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0698 | Windows Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0701 | Windows Client License Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2020-0735 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Remote Desktop Client | CVE-2020-0734 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Secure Boot | CVE-2020-0689 | Microsoft Secure Boot Security Feature Bypass Vulnerability | Important |
| SQL Server | CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Important |
| Windows Authentication Methods | CVE-2020-0665 | Active Directory Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0752 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0749 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0750 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2020-0751 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2020-0662 | Windows Remote Code Execution Vulnerability | Critical |
| Windows Hyper-V | CVE-2020-0661 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Installer | CVE-2020-0686 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2020-0683 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2020-0728 | Windows Modules Installer Service Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0722 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0721 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0719 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0720 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0723 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0731 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0726 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0724 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0725 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0717 | Win32k Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0736 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0716 | Win32k Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2020-0691 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2020-0738 | Media Foundation Memory Corruption Vulnerability | Critical |
| Windows NDIS | CVE-2020-0705 | Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2020-0660 | Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability | Important |
| Windows Shell | CVE-2020-0702 | Surface Hub Security Feature Bypass Vulnerability | Important |
| Windows Shell | CVE-2020-0655 | Remote Desktop Services Remote Code Execution Vulnerability | Important |
| Windows Shell | CVE-2020-0730 | Windows User Profile Service Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2020-0729 | LNK Remote Code Execution Vulnerability | Critical |
| Windows Shell | CVE-2020-0707 | Windows IME Elevation of Privilege Vulnerability | Important |
| Windows Update Stack | CVE-2020-0708 | Windows Imaging Library Remote Code Execution Vulnerability | Important |
Source: February 2020 Security Updates – Release Notes
"*" señala los campos obligatorios
Receive the Latest Patch Tuesday Report for FREE Every Month