⚡ TL;DR | Go Straight to the November 2020 Patch Tuesday Audit Report.
Microsoft released fixes for 112 critical security vulnerabilities as part of its November 2020 Patch Tuesday, including an actively exploited zero-day flaw disclosed by Google’s security team.
The updates this month affect the Windows Operating System, Office and Office 365, Internet Explorer, Edge, Edge Chromium, Microsoft Exchange Server, Microsoft Dynamics, Azure Sphere, Windows Defender, Microsoft Teams, Azure SDK, DevOps, ChakraCore and Visual Studio. Of the 112 vulnerabilities fixed today, 17 are rated as Critical, 93 are classified as Important, and two as moderate.
Microsoft fixes Windows Zero-day Disclosed by Google
Included in the November updates is a fix for a zero-day privilege escalation vulnerability (CVE-2020-17087) in the Windows Kernel Cryptography Driver (cng.sys). This flaw was disclosed by the Google Project Zero team as being exploited together with a Chrome zero-day vulnerability to compromise desktop systems running Windows 7 or later and servers running Windows Server 2008 and higher. Google already released an update for its Chrome browser to address the zero-day (CVE-2020-15999) last month.
Additionally, the November 2020 updates fix a number of RCE vulnerabilities impacting Exchange Server (CVE-2020-17084), Network File System (CVE-2020-17051), and Microsoft Teams (CVE-2020-17091), as well as a security bypass flaw in Windows Hyper-V software (CVE-2020-17040).
Run the November 2020 Patch Tuesday Audit Report
Just like the previous months, our experts created a Patch Tuesday audit Report that checks if the assets in your network are on the latest patch updates. It’s color-coded to give you an easy and quick overview of which assets are already on the latest Windows update, and which ones still need to be patched. As always, all admins are advised to install these security updates as soon as possible to protect Windows from security risks.
If you haven’t already, start your free trial of Lansweeper to run the Microsoft Patch Tuesday Report. Make sure to subscribe via the form below if you want to receive the latest Microsoft Patch reports and bonus network reports.
Receive the Latest Patch Tuesday Report for FREE Every Month
"*" indicates required fields
