Microsoft Patch Tuesday – October 2020

⚡ TL;DR | Go Straight to the October 2020 Patch Tuesday Audit Report.

It’s October! This means that it’s cybersecurity awareness month. It’s also the second Tuesday of the month, which means that Microsoft is coming with a bunch of new software updates for their operating systems. In their latest patch, they included 87 fixes for various vulnerabilities and security problems in Microsoft Windows and other programs. Time to start patching!

They filled the October 2020 patch tuesday with fixes for 21 remote code execution vulnerabilities in products like Outlook, Excel and other Windows programs. Furthermore, there are 11 bugs that are marked ‘critical’, which makes them vulnerable for malicious software in order to take complete control of your system.

The most critical vulnerabilities

We start with CVE-2020-16898, which is a remote code execution vulnerability within Windows TCP/IP stack. If attackers leverage this by sending a malicious packet of data to that unpatched Windows system, they can take full control of your system. This flaw was named “Bad Neighbor” by McAfee.

Another critical vulnerability is CVE-2020-16947. This is a bug in Microsoft Outlook that can help an attacker gain access to your Windows system by just previewing a malicious email. Dustin Child stated that the preview pane is where the attack happens, you don’t even have to open the e-mail to become infected.

There are also two critical RCE vulnerabilities in the Microsoft SharePoint server. CVE-2020-16952 and CVE-2020-16951 are being exploited by a flaw in checking the source markup of the application. This allows the attacker to run arbitrary code in SharePoint.

Below, we made a table with the critical CVE codes for the Patch Tuesday October 2020 most critical CVE codes and their CVE description.

Additional security updates

Adobe released a few security updates for their Flash Player, InDesign, Lightroom, Media Encoder and Framemaker. SAP released their Security Patch for October 2020 with 15 security notes. Intel has also released a few security updates, with the most important one being the BlueZ Advisory.

VMWare fixed some security vulnerabilities in their products. With Chrome being a heavy-used browser, we remind you to install their latest Chrome 86 update.

Run the October 2020 Patch Tuesday Audit Report and start scanning

Just like the previous months, our experts created an audit Report that checks if the assets in your network are on the latest October 2020 patch updates. It’s color-coded to give you an easy and quick overview of which assets are already on the latest Windows update, and which ones still need to be patched. As always, all admins are advised to install these security updates as soon as possible to protect Windows from security risks.

If you haven’t already, start your free trial of Lansweeper to run the Microsoft Patch Tuesday Report. Make sure to subscribe via the form below if you want to receive the latest Microsoft Patch reports and bonus network reports.

Receive the Latest Patch Tuesday Report for FREE Every Month

"*" señala los campos obligatorios

Email*

This field is hidden when viewing the form

EmailType

This field is hidden when viewing the form

IM – Conv Page – Processing

This field is hidden when viewing the form

IM – UTM_Campaign FC – Processing

This field is hidden when viewing the form

IM – UTM_Campaign LC – Processing

This field is hidden when viewing the form

IM – UTM_Content FC – Processing

This field is hidden when viewing the form

IM – UTM_Content LC – Processing

This field is hidden when viewing the form

IM – UTM_Medium FC – Processing

This field is hidden when viewing the form

IM – UTM_Medium LC – Processing

This field is hidden when viewing the form

IM – UTM_Source FC – Processing

This field is hidden when viewing the form

IM – UTM_Source LC – Processing

This field is hidden when viewing the form

IM – UTM_Term FC – Processing

This field is hidden when viewing the form

IM – UTM_Term LC – Processing

This field is hidden when viewing the form

gclid

This field is hidden when viewing the form

msclkid

Email

Este campo es un campo de validación y debe quedar sin cambios.

Count Me In Submit