Microsoft Patch Tuesday Audit – June 2020

Patch Tuesday June 2020 is here with 129 Fixes

The June 2020 Patch Tuesday security updates have arrived! Microsoft released a grand total of 129 security updates, which is the largest Patch Tuesday update ever released by Microsoft.

⚡ TL;DR | Go Straight to the June 2020 Patch Tuesday Audit Report.

Microsoft released this edition with patches for 129 vulnerabilities in Windows and other software (see our complete CVE list below). For now, non of these vulnerabilities are actively exploited in the wild but nevertheless, we recommend patching all your Windows systems.

There are 11 vulnerabilities rated as 'critical'. This means that they can easily be exploited by attackers via malicious software to take control of vulnerable systems without actions that are being made by the user. Most of them are remote code execution vulnerabilities.

SMBleed Vulnerability within Windows SMB Protocol

Cybersecurity researchers uncovered a new critical vulnerability affecting the SMB protocol named SMBleed (CVE-2020-1206). SMBleed has a similar function to the earlier reported SMBGhost vulnerability that could expose vulnerable Windows systems to malicious software.

The SMBleed flaw impacts the Windows 10 version 1903 and 1909. There is a flaw in SMB which allows an attacker to read the uninitialized kernel memory and make modifications to that function.

Microsoft stated that: "To exploit the vulnerability against a client, an unauthenticated attacker would need to configure a malicious SMBv3 server and convince a user to connect to it."

The other critical bugs included in the Patch Tuesday updates of June 2020 are:

• Remote code execution in Microsoft Sharepoint
• Remote code execution in Windows OLE
• Remote code execution in the Windows Graphics Device Interface (GDI)
• Remote code execution in the Windows VBScript scripting engine
• Remote code execution in Microsoft Excel
• Remote code execution in the Windows OS print spooler component
• Remote code execution in processing Windows .LNK files
• Remote code execution in Word for Android

Run Our Report

Similar to previous months, we've created an Audit Report that checks if the assets in your network are on the latest Microsoft patch update. It's color-coded to give you an easy and quick overview of which assets are already on the latest Windows update, and which ones still need to be patched. All admins are advised to install these security updates as soon as possible to protect Windows from security risks.

Overview: Patch Tuesday June 2020 CVE Codes

We have compiled a list of all the security updates.

If you haven't already, start your free trial of Lansweeper to run the Microsoft Patch Tuesday Report. Make sure to subscribe via the form below if you want to receive the latest Microsoft Patch reports and bonus network reports.