Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Updated January 15th: Added an Advanced Custom Detection ACD signature for AMP that can be used to detect exploitation of CVE-2020-0601 by spoofing certificates masquerading as a Microsoft ECC Code Signing Certificate Authority. Microsoft released its monthly security update today...

Servicing stack update for Windows Server 2008 SP2: January 14, 2020

Servicing stack update for Windows Server 2008 SP2: January 14, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your...

Servicing stack update for Windows Server 2008 SP2: November 12, 2019

Servicing stack update for Windows Server 2008 SP2: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befor...

Servicing stack update for Windows Server 2008 SP2: December 10, 2019

Servicing stack update for Windows Server 2008 SP2: December 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befor...

Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019

Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019 Summary This update makes quality improvements to the servicing stack component that installs Windows updates. Key changes include: Addresses an issue in the servicing stack when you install an update that has...

Servicing stack update for Windows Server 2008 SP2: April 9, 2019

Servicing stack update for Windows Server 2008 SP2: April 9, 2019 Summary This update makes quality improvements to the servicing stack component that installs Windows updates. Key changes include: Addresses an issue in the servicing stack when you install an update that has been signed by using...

January 2020 security updates are available!

We have released the January security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...

January 2020 security updates are available!

We have released the January security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...

Security Only Update for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4534979)

Security Only Update for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4534979 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Summary A remote code execution vulnerability exists when the...

January 14, 2020—KB4534314 (Security-only update)

None None...

January 2020 security updates are available!

We have released the January security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...

January 14, 2020—KB4534312 (Security-only update)

None None...

Internet Explorer help

None None...

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4535105)

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4535105 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Summary A remote code execution vulnerability exists when the...

Microsoft Windows CVE-2020-0635 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Window...

Microsoft Windows Search Indexer CVE-2020-0631 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

KB4534312: Windows Server 2008 January 2020 Security Update

The remote Windows host is missing security update 4534312 or cumulative update 4534303. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory. ...

KB4534314: Windows 7 and Windows Server 2008 R2 January 2020 Security Update

The remote Windows host is missing security update 4534314 or cumulative update 4534310. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information. An attacker who successfully...

The Citrix Licensing Service Crashes on Startup

The Citrix Licensing Service crashes on startup when using License Server versions 11.6.1 build 10007 through 11.9 installed on Windows Server 2003, Windows Server 2008 or Windows Server 2008 R2. The following Event ID 1000 is logged in the Windows Application Event Log: Event Type: ErrorEvent...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-02180)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows 7 SP1, Windows Server...