Patch Tuesday February 2020: Update Highlights and Known Issues
Patch Tuesday February 2020 Edition
Microsoft rolled out the February 2020 Patch Tuesday updates on February 11, 2020. As always, with this batch of updates, the Redmond giant focuses on improving the overall functionality of the OS and fixing existing bugs.
This month’s updates are all about improving the security of most Windows components and apps. If you want to install the latest updates, you can check out this guide where you’ll also find the direct download links.
We already covered the key changes in these posts. Do check them out to learn what’s new:
- Download the Windows 10 February Patch Tuesday updates today
- Latest Patch Tuesday updates fix an astonishing 99 CVEs
- Download Adobe Patch Tuesday Updates [February 2020]
- Download Windows 7’s last free security updates
What are the main updates
- Microsoft Windows
Microsoft rolls out different Patch Tuesday updates for all the Windows 10 versions currently supported. For more information on the latest updates, check out our Windows 10 Patch Tuesday update history page.
- Internet Explorer
Earlier in January, Microsoft acknowledged an Internet Explorer zero-day vulnerability – CVE-2020-0674. With February’s Patch Tuesday updates, the company addressed the Scripting Engine Memory Corruption Vulnerability.
The fix for the CVE prevents an attacker from executing arbitrary code and denies him the same rights as the current user.
- Microsoft Hyper-V
Hyper-V is Windows 10‘s built-in hypervisor. You can use this tool to emulate various third-party software and operating systems on your computer.
The latest Patch Tuesday updates improved Hyper-V‘s functionality by fixing a Denial of Service vulnerability that would allow an attacker who already has a privileged account on a guest operating system to run a specially crafted application that would crash the host machine. Microsoft fixed this issue by correcting how Hyper-V validates user input.
The Graphics Device Interface (also known as GDI) is a Windows component that represents graphical objects to monitors and printers. This month’s cumulative updates fixed a Graphics Device Interface vulnerability that would allow arbitrary code execution if the attacker used this vulnerability in combination with another vulnerability.
- Win32k
Microsoft patched a critical elevation of privilege vulnerability that allowed hackers to run arbitrary code in kernel mode. Attackers could install programs, as well as view, change, or delete data. This vulnerability also allowed hackers to create new accounts with full user rights.
- Adobe
Adobe rolled out security updates for most of its products. There are around 42 CVEs patched in February. You can read more about each update in this quick guide.
Patch Tuesday list of CVEs
If you want to learn more about this month’s list of common vulnerabilities and exposures, you can check out the table below:
| Tag | CVE ID | CVE Title | Severity |
|---|---|---|---|
| Adobe Flash Player | ADV200003 | February 2020 Adobe Flash Security Update | Important |
| Internet Explorer | CVE-2020-0674 | Scripting Engine Memory Corruption Vulnerability | Moderate |
| Internet Explorer | CVE-2020-0673 | Scripting Engine Memory Corruption Vulnerability | Moderate |
| Microsoft Edge | CVE-2020-0663 | Microsoft Edge Elevation of Privilege Vulnerability | Important |
| Microsoft Edge | CVE-2020-0706 | Microsoft Browser Information Disclosure Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0692 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0688 | Microsoft Exchange Memory Corruption Vulnerability | Important |
| Microsoft Exchange Server | CVE-2020-0696 | Microsoft Outlook Security Feature Bypass Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0744 | Windows GDI Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0745 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0714 | DirectX Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0715 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0746 | Microsoft Graphics Components Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0709 | DirectX Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2020-0792 | Windows Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Malware Protection Engine | CVE-2020-0733 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability | Important |
| Microsoft Office | CVE-2020-0697 | Microsoft Office Tampering Vulnerability | Important |
| Microsoft Office | CVE-2020-0759 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2020-0695 | Microsoft Office Online Server Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2020-0694 | Microsoft Office SharePoint XSS Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2020-0693 | Microsoft Office SharePoint XSS Vulnerability | Important |
| Microsoft Scripting Engine | CVE-2020-0713 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0711 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0710 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0712 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Scripting Engine | CVE-2020-0767 | Scripting Engine Memory Corruption Vulnerability | Critical |
| Microsoft Windows | CVE-2020-0741 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0742 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0740 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0658 | Windows Common Log File System Driver Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0737 | Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0659 | Windows Data Sharing Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0739 | Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0757 | Windows SSH Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0732 | DirectX Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0753 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0755 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0754 | Windows Error Reporting Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0657 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0667 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0743 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0666 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0748 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0747 | Windows Data Sharing Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0668 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0704 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0685 | Windows COM Server Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0676 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0678 | Windows Error Reporting Manager Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0703 | Windows Backup Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0680 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0679 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0681 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Microsoft Windows | CVE-2020-0677 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0682 | Windows Function Discovery Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0756 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0670 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0675 | Windows Key Isolation Service Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0669 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0727 | Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0671 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0672 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Microsoft Windows | CVE-2020-0698 | Windows Information Disclosure Vulnerability | Important |
| Microsoft Windows | CVE-2020-0701 | Windows Client License Service Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2020-0735 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Remote Desktop Client | CVE-2020-0734 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Secure Boot | CVE-2020-0689 | Microsoft Secure Boot Security Feature Bypass Vulnerability | Important |
| SQL Server | CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Important |
| Windows Authentication Methods | CVE-2020-0665 | Active Directory Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0752 | Windows Search Indexer Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0749 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Windows COM | CVE-2020-0750 | Connected Devices Platform Service Elevation of Privilege Vulnerability | Important |
| Windows Hyper-V | CVE-2020-0751 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Hyper-V | CVE-2020-0662 | Windows Remote Code Execution Vulnerability | Critical |
| Windows Hyper-V | CVE-2020-0661 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Windows Installer | CVE-2020-0686 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2020-0683 | Windows Installer Elevation of Privilege Vulnerability | Important |
| Windows Installer | CVE-2020-0728 | Windows Modules Installer Service Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0722 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0721 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0719 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0720 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0723 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0731 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0726 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0724 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0725 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2020-0717 | Win32k Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0736 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2020-0716 | Win32k Information Disclosure Vulnerability | Important |
| Windows Kernel-Mode Drivers | CVE-2020-0691 | Win32k Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2020-0738 | Media Foundation Memory Corruption Vulnerability | Critical |
| Windows NDIS | CVE-2020-0705 | Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability | Important |
| Windows RDP | CVE-2020-0660 | Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability | Important |
| Windows Shell | CVE-2020-0702 | Surface Hub Security Feature Bypass Vulnerability | Important |
| Windows Shell | CVE-2020-0655 | Remote Desktop Services Remote Code Execution Vulnerability | Important |
| Windows Shell | CVE-2020-0730 | Windows User Profile Service Elevation of Privilege Vulnerability | Important |
| Windows Shell | CVE-2020-0729 | LNK Remote Code Execution Vulnerability | Critical |
| Windows Shell | CVE-2020-0707 | Windows IME Elevation of Privilege Vulnerability | Important |
| Windows Update Stack | CVE-2020-0708 | Windows Imaging Library Remote Code Execution Vulnerability | Important |
What are the best practices for Patch Tuesday
There are a few things that you can do in order to make sure that your computer installs the latest Patch Tuesday updates without any issues. We all know that Windows updates often trigger errors. In extreme cases, they may even render your PC completely unusable. Follow these tips to make sure the update install process goes as smoothly as possible.
How to download the latest PT updates
We have a special category where we keep track of all the monthly releases for the products that you are interested in.
Exploit Wednesday & Uninstall Thursday
Right after Patch Tuesday, hackers try to exploit the vulnerabilities left unpatched by Microsoft. This leads to an increase in the number of cyber attacks. On the other hand, many users often decide to uninstall the Patch Tuesday updates a few hours after install due to the large number of issues they triggered — hence the name Uninstall Thursday. Check out this guide to learn more on how to stay safe after Patch Tuesday and make sure the updates don’t brick your computer.
Patch Tuesday: All your Questions Answered
- When is Patch Tuesday released? Microsoft rolls out new Patch Tuesday updates on the second Tuesday of each month. The next Patch Tuesday Update is expected to arrive on February 11, 2020.
- How does Patch Tuesday work? We already answered this question in this quick guide. Do check it out to learn more on the mechanisms behind Patch Tuesday.
- What is the bandwidth impact of Patch Tuesday? When actively downloading updates, you may experience slow connection issues on your Windows 10 computer. This happens especially when updating multiple PCs at the same time. The solution is to distribute the updates locally via WSUS. This means downloading the updates from Microsoft Servers. Then, your Windows 10 computers can share the updates in a peer-to-peer manner over the local network resulting in a faster update process.
Patch Tuesday Troubleshooting
Oftentimes, Patch Tuesday updates trigger various errors on Windows computers. These may range from minor glitches to technical issues that may render your computer unusable. We covered extensively Patch Tuesday issues we compiled hundreds of troubleshooting guides to help you solve these problems quickly.