September 3, 2020—KB4571744 (OS Build 19041.488) Preview

None None...

NVIDIA D3D10 driver nvwgf2umx_cfg.dll nvwg MOV2 code execution vulnerability

Summary An exploitable code execution vulnerability exists in the nvwg MOV2 functionality of NVIDIA D3D10 Driver Version 442.50 - 26.21.14.4250. A specially crafted shader can cause remote code execution. An attacker can use this vulnerability to guest-to-host escape through Hyper-V RemoteFX...

August 20, 2020—KB4566116 (OS Builds 18362.1049 and 18363.1049) Preview

None None...

August 11, 2020—KB4571723 (Security-only update)

None None...

August 11, 2020—KB4571709 (OS Build 17134.1667)

None None...

August 11, 2020—KB4571702 (Security-only update)

None None...

August 11, 2020—KB4571692 (OS Build 10240.18666)

None None...

August 11, 2020—KB4571694 (OS Build 14393.3866)

None None...

August 11, 2020—KB4566782 (OS Build 19041.450)

None None...

August 11, 2020—KB4565349 (OS Build 17763.1397)

None None...

August 11, 2020—KB4565351 (OS Builds 18362.1016 and 18363.1016) - EXPIRED

None None...

August 11, 2020—KB4571719 (Security-only update)

None None...

August 11, 2020—KB4571736 (Monthly Rollup)

None None...

August 11, 2020—KB4571741 (OS Build 16299.2045)

None None...

August 11, 2020—KB4571703 (Monthly Rollup)

None None...

August 11, 2020—KB4571729 (Monthly Rollup)

None None...

August 11, 2020—KB4571689 (OS Build 15063.2467)

None None...

July 31, 2020—KB4568831 (OS Build 19041.423) Preview

None None...

Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips

Piotr Bania of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Intel’s Graphics Accelerator Driver and in an AMD Radeon driver. The Intel driver was released in 2019 and is used in multiple Intel integrated and...

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...