Microsoft yesterday released the June 2020 Patch Tuesday , which includes the monthly security for updates its products .
With the new Patch Tuesday, the company fixes 129 vulnerabilities! This is the largest Patch Tuesday release in Microsoft's history.
The most positive thing is that none of the vulnerabilities being fixed have been exploited by malicious hackers. Microsoft acted quickly and released the security.
System administrators who manage many computers (e.g. in businesses and government organizations) should install Patch Tuesday as soon as possible to keep their systems secure.
Malware creators monitor Patch Tuesday and Microsoft security updates in general, selecting the most useful bugs and trying to exploit them as quickly as possible. For this reason, users should install the updates immediately.
Among the most important bugs fixed with June's Patch Tuesday are the following:
- CVE-2020-1181: Remote code execution in Microsoft SharePoint.
- CVE-2020-1225, CVE-2020-1226: Remote code execution in Microsoft Excel.
- CVE-2020-1223: Remote code execution in Word for Android.
- CVE-2020-1248: Remote code execution in the Windows Graphics Device Interface (GDI).
- CVE-2020-1281: Remote code execution in Windows OLE.
- CVE-2020-1299: Remote code execution when processing Windows .LNK files.
- CVE-2020-1300: Remote code execution in the Windows OS print spooler component.
- CVE-2020-1301: Remote code execution in the Windows SMB (Server Message Block) protocol.
- CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260: Remote code execution in the Windows VBScript scripting engine.
| Tags | CVE ID | CVE Title |
| Android App | CVE-2020-1223 | Word for Android Remote Code Execution Vulnerability |
| Apps | CVE-2020-1329 | Microsoft Bing Search Spoofing Vulnerability |
| Azure DevOps | CVE-2020-1327 | Azure DevOps Server HTML Injection Vulnerability |
| Diagnostics Hub | CVE-2020-1278 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| Diagnostics Hub | CVE-2020-1203 | Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
| Diagnostics Hub | CVE-2020-1202 | Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
| HoloLens | CVE-2020-1199 | Windows Feedback Hub Elevation of Privilege Vulnerability |
| Internet Explorer | CVE-2020-1315 | Internet Explorer Information Disclosure Vulnerability |
| Microsoft Browsers | CVE-2020-1219 | Microsoft Browser Memory Corruption Vulnerability |
| Microsoft Edge | CVE-2020-1242 | Microsoft Edge Information Disclosure Vulnerability |
| Microsoft Edge (Chromium-based) in IE Mode | CVE-2020-1220 | Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability |
| Microsoft Graphics Component | CVE-2020-1207 | Win32k Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-1258 | DirectX Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-1251 | Win32k Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-1160 | Microsoft Graphics Component Information Disclosure Vulnerability |
| Microsoft Graphics Component | CVE-2020-0915 | Windows GDI Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-1253 | Win32k Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-1348 | Windows GDI Information Disclosure Vulnerability |
| Microsoft Graphics Component | CVE-2020-0986 | Windows Kernel Elevation of Privilege Vulnerability |
| Microsoft Graphics Component | CVE-2020-0916 | Windows GDI Elevation of Privilege Vulnerability |
| Microsoft JET Database Engine | CVE-2020-1236 | Jet Database Engine Remote Code Execution Vulnerability |
| Microsoft JET Database Engine | CVE-2020-1208 | Jet Database Engine Remote Code Execution Vulnerability |
| Microsoft Malware Protection Engine | CVE-2020-1163 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
| Microsoft Malware Protection Engine | CVE-2020-1170 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
| Microsoft Office | CVE-2020-1226 | Microsoft Excel Remote Code Execution Vulnerability |
| Microsoft Office | CVE-2020-1225 | Microsoft Excel Remote Code Execution Vulnerability |
| Microsoft Office | CVE-2020-1229 | Microsoft Outlook Security Feature Bypass Vulnerability |
| Microsoft Office | CVE-2020-1321 | Microsoft Office Remote Code Execution Vulnerability |
| Microsoft Office | CVE-2020-1322 | Microsoft Project Information Disclosure Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1289 | Microsoft SharePoint Spoofing Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1181 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1148 | Microsoft SharePoint Spoofing Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1183 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1318 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1295 | Microsoft SharePoint Elevation of Privilege Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1298 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1323 | SharePoint Open Redirect Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1297 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1178 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1177 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Office SharePoint | CVE-2020-1320 | Microsoft Office SharePoint XSS Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1260 | VBScript Remote Code Execution Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1215 | VBScript Remote Code Execution Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1230 | VBScript Remote Code Execution Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1073 | Scripting Engine Memory Corruption Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1214 | VBScript Remote Code Execution Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1216 | VBScript Remote Code Execution Vulnerability |
| Microsoft Scripting Engine | CVE-2020-1213 | VBScript Remote Code Execution Vulnerability |
| Microsoft Windows | CVE-2020-1324 | Windows Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1162 | Windows Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1305 | Windows State Repository Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1313 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1316 | Windows Kernel Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1309 | Microsoft Store Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1312 | Windows Installer Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1306 | Windows Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1296 | Windows Diagnostics & Vulnerability Disclosure Information feedback |
| Microsoft Windows | CVE-2020-1270 | Windows WLAN Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1255 | Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1283 | Windows Denial of Service Vulnerability |
| Microsoft Windows | CVE-2020-1263 | Windows Error Reporting Information Disclosure Vulnerability |
| Microsoft Windows | CVE-2020-1259 | Windows Host Guardian Service Security Feature Bypass Vulnerability |
| Microsoft Windows | CVE-2020-1268 | Windows Service Information Disclosure Vulnerability |
| Microsoft Windows | CVE-2020-1290 | Win32k Information Disclosure Vulnerability |
| Microsoft Windows | CVE-2020-1291 | Windows Network Connections Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1292 | OpenSSH for Windows Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1317 | Group Policy Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1244 | Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
| Microsoft Windows | CVE-2020-1241 | Windows Kernel Security Feature Bypass Vulnerability |
| Microsoft Windows | CVE-2020-1314 | Windows Text Service Framework Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1271 | Windows Backup Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1222 | Microsoft Store Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1120 | Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
| Microsoft Windows | CVE-2020-1201 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1233 | Windows Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1246 | Windows Kernel Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1235 | Windows Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1234 | Windows Error Reporting Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1197 | Windows Error Reporting Manager Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1194 | Windows Registry Denial of Service Vulnerability |
| Microsoft Windows | CVE-2020-1231 | Windows Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1209 | Windows Network List Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1204 | Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1307 | Windows Kernel Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1211 | Connected Devices Platform Service Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1196 | Windows Print Configuration Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1334 | Windows Runtime Elevation of Privilege Vulnerability |
| Microsoft Windows | CVE-2020-1217 | Windows Runtime Information Disclosure Vulnerability |
| Microsoft Windows PDF | CVE-2020-1248 | GDI+ Remote Code Execution Vulnerability |
| Open Source Software | CVE-2020-1340 | NuGetGallery Spoofing Vulnerability |
| System Center | CVE-2020-1331 | System Center Operations Manager Spoofing Vulnerability |
| Visual Studio | CVE-2020-1343 | Visual Studio Code Live Share Information Disclosure Vulnerability |
| Windows COM | CVE-2020-1311 | Component Object Model Elevation of Privilege Vulnerability |
| Windows Diagnostic Hub | CVE-2020-1293 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| Windows Diagnostic Hub | CVE-2020-1257 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
| Windows Error Reporting | CVE-2020-1261 | Windows Error Reporting Information Disclosure Vulnerability |
| Windows Installer | CVE-2020-1272 | Windows Installer Elevation of Privilege Vulnerability |
| Windows Installer | CVE-2020-1302 | Windows Installer Elevation of Privilege Vulnerability |
| Windows Installer | CVE-2020-1277 | Windows Installer Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1276 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1310 | Win32k Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1273 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1280 | Windows Bluetooth Service Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1275 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1247 | Win32k Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1274 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1262 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1237 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1266 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1269 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1282 | Windows Runtime Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1264 | Windows Kernel Elevation of Privilege Vulnerability |
| Windows Kernel | CVE-2020-1265 | Windows Runtime Elevation of Privilege Vulnerability |
| Windows Lock Screen | CVE-2020-1279 | Windows Lockscreen Elevation of Privilege Vulnerability |
| Windows Media | CVE-2020-1238 | Media Foundation Memory Corruption Vulnerability |
| Windows Media | CVE-2020-1304 | Windows Runtime Elevation of Privilege Vulnerability |
| Windows Media Player | CVE-2020-1239 | Media Foundation Memory Corruption Vulnerability |
| Windows Media Player | CVE-2020-1232 | Media Foundation Information Disclosure Vulnerability |
| Windows OLE | CVE-2020-1281 | Windows OLE Remote Code Execution Vulnerability |
| Windows OLE | CVE-2020-1212 | OLE Automation Elevation of Privilege Vulnerability |
| Windows Print Spooler Components | CVE-2020-1300 | Windows Remote Code Execution Vulnerability |
| Windows Shell | CVE-2020-1299 | LNK Remote Code Execution Vulnerability |
| Windows Shell | CVE-2020-1286 | Windows Shell Remote Code Execution Vulnerability |
| Windows SMB | CVE-2020-1206 | Windows SMBv3 Client/Server Information Disclosure Vulnerability |
| Windows SMB | CVE-2020-1284 | Windows SMBv3 Client/Server Denial of Service Vulnerability |
| Windows SMB | CVE-2020-1301 | Windows SMB Remote Code Execution Vulnerability |
| Windows Update Stack | CVE-2020-1254 | Windows Modules Installer Service Elevation of Privilege Vulnerability |
| Windows Wallet Service | CVE-2020-1294 | Windows WalletService Elevation of Privilege Vulnerability |
| Windows Wallet Service | CVE-2020-1287 | Windows WalletService Elevation of Privilege Vulnerability |
📧
Subscribe to the SecNews Newsletter
