LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: Corrine on September 08, 2020, 05:51:45 PM

Title: Microsoft September 2020 Security Updates
Post by: Corrine on September 08, 2020, 05:51:45 PM
The Microsoft September security updates have been released and consist of 129 CVEs. Of these 129 CVEs, 23 are rated Critical, 105 are rated Important and 1 is rated moderate in severity.

The updates apply to the following: Microsoft Windows, Microsoft Edge (EdgeHTML-based), Microsoft Edge (Chromium-based), Microsoft ChakraCore, Internet Explorer, SQL Server, Microsoft JET Database Engine, Microsoft Office and Microsoft Office Services and Web Apps, Microsoft Dynamics, Visual Studio, Microsoft Exchange Server, SQL Server, ASP.NET, Microsoft OneDrive, and Azure DevOps.

An update to ADV990001 (https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001) includes information on the new versions of Servicing Stack. For information about Servicing Stack updates see Servicing Stack Updates (SSU) (https://securitygarden.blogspot.com/2019/08/servicing-stack-updates-ssu.html).

See Dustin Childs review and analysis in https://www.zerodayinitiative.com/blog/2020/9/8/the-september-2020-security-update-review.

September Security Updates Guide (https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Sep)