Microsoft Windows Security Updates June 2020 overview

[harlan4096]

Welcome to the overview of Microsoft's June 2020 security patch day. Microsoft releases security updates for all its products on the second Tuesday of the month. This overview provides you with detailed information on the released patches.

It includes links to the security patches as well as an Excel spreadsheet that lists all released security updates. You find direct download links of the latest cumulative updates for supported versions of Windows, the list of known issues, and other information that are useful when it comes to the released patches.

If you have missed out last month's Patch Day overview, check it out here.

Microsoft Windows Security Updates June 2020

Download the linked Excel spreadsheet to your local system: it contains a list of released security updates that Microsoft released on the June 2020 Patch Day.

Click on the following link to download the file to your system: microsoft-windows-security-updates-june-2020

Executive Summary

• Microsoft released security updates for all supported versions of Windows (client and server).
  
• Security updates are also available for Microsoft Edge (classic and Chromium), Internet Explorer, Microsoft Office, Windows Defender, Visual Studio, Microsoft Apps for Android, Windows App Store, System Center, and other Microsoft products.
  
• The following Windows products have known issues: Windows 10 version 1607, 1809, 1903, and 1909, Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Server 2016, Windows Server 2019, Windows Server version 1903 and 1909.
  

Operating System Distribution

• Windows 7  (extended support only): 30 vulnerabilities: 3 critical and 27 important
  • CVE-2020-1281 | Windows OLE Remote Code Execution Vulnerability
    
  • CVE-2020-1299 | LNK Remote Code Execution Vulnerability
    
  • CVE-2020-1300 | Windows Remote Code Execution Vulnerability
    
• Windows 8.1: 37 vulnerabilities: 3 rated critical and 34 rated important
  • same critical vulnerabilities as Windows 7
    
• Windows 10 version 1803: 78 vulnerabilities: 4 critical and 74 important
  • CVE-2020-1281 | Windows OLE Remote Code Execution Vulnerability
    
  • CVE-2020-1286 | Windows Shell Remote Code Execution Vulnerability
    
  • CVE-2020-1299 | LNK Remote Code Execution Vulnerability
    
  • CVE-2020-1300 | Windows Remote Code Execution Vulnerability
    
• Windows 10 version 1809: 82 vulnerabilities: 4 critical and 78 important
  • same critical vulnerabilities as Windows 10 version 1803
    
• Windows 10 version 1903: 91 vulnerabilities: 5 critical and 73 important
  • same as Windows 10 version 1803 plus
    
  • CVE-2020-1248 | GDI+ Remote Code Execution Vulnerability
    
• Windows 10 version 1909: 
  • same as Windows 10 version 1903
    
• Windows 10 version 2004:
  

Windows Server products

• Windows Server 2008 R2 (extended support only): 30 vulnerabilities: 3 critical and 27 important
  • CVE-2020-1281 | Windows OLE Remote Code Execution Vulnerability
    
  • CVE-2020-1299 | LNK Remote Code Execution Vulnerability
    
  • CVE-2020-1300 | Windows Remote Code Execution Vulnerability
    

• Windows Server 2012 R2: 37 vulnerabilities: 3 critical and 34 important.
  • same as Windows Server 2008 R2
    
• Windows Server 2016: 60 vulnerabilities: 3 critical and 57 important.
  • same as Windows Server 2008 R2
    
• Windows Server 2019: 81 vulnerabilities: 4 critical and 77 are important
  • CVE-2020-1281 | Windows OLE Remote Code Execution Vulnerability
    
  • CVE-2020-1286 | Windows Shell Remote Code Execution Vulnerability
    
  • CVE-2020-1299 | LNK Remote Code Execution Vulnerability
    
  • CVE-2020-1300 | Windows Remote Code Execution Vulnerability
    

Other Microsoft Products

• Internet Explorer 11: 7 vulnerability: 3 critical, 4 important
  • CVE-2020-1213 | VBScript Remote Code Execution Vulnerability
    
  • CVE-2020-1216 | VBScript Remote Code Execution Vulnerability
    
  • CVE-2020-1260 | VBScript Remote Code Execution Vulnerability
    
• Microsoft Edge:  4 vulnerabilities: 2 critical, 2 important
  • CVE-2020-1073 | Scripting Engine Memory Corruption Vulnerability
    
  • CVE-2020-1219 | Microsoft Browser Memory Corruption Vulnerability
    
• Microsoft Edge on Chromium:
  • see here (latest security patches from the Chromium project)
    

...

Continue Reading