Windows 10: Microsoft Windows Security Updates January 2020 overview (end of Windows 7 support edition)

Welcome to the first Microsoft Patch Day overview of 2020 and the last Patch Day for the company's Windows 7 operating system (as well as for Windows Server 2008 and Windows Server 2008 R2).

Microsoft released security updates for all supported client and server versions of windows on the January 2020 Patch Tuesday. The company released updates for other products, e.g. Microsoft Office, as well on this day.

The overview starts with an executive summary and the operating system distribution that lists the number of vulnerabilities and the severity rating for each supported version of Windows as well as Microsoft Edge and Internet Explorer.

The list of released updates, non-security updates, security advisories, and known issues follow. You find links to direct downloads for Windows updates as well as resource links at the bottom of the guide.

Click here to open the overview of the December 2019 Windows Security updates.

Microsoft Windows Security Updates January 2020


You may download the following (zipped) Excel spreadsheet that contains a list of released updates in January 2020: windows-security-updates-january-2020

Executive Summary

• This is the last Patch Day for Windows 7 unless you are a business / Enterprise and subscribed to ESU. Home users may find the "what now" article useful.
• Microsoft released security updates for all client and server versions of the Windows operating system.
• Other Microsoft products that received security updates are: Internet Explorer, OneDrive for Android, Microsoft Office, .Net Framework, .Net Core, Asp.net Core, Microsoft Dynamics.

Operating System Distribution

• Windows 7: 18 vulnerabilities: 1 rated critical and 17 rated important
  • CVE-2020-0611 | Remote Desktop Client Remote Code Execution Vulnerability
• Windows 8.1: 23 vulnerabilities: 1 rated critical and 22 rated important
  • same as Windows 7
• Windows 10 version 1803: 29 vulnerabilities: 1 critical and 28 important
  • same as Windows 7
• Windows 10 version 1809: 29 vulnerabilities: 1 critical and 28 important
  • same as Windows 7
• Windows 10 version 1903: 29 vulnerabilities: 1 critical and 28 important
  • same as Windows 7
• Windows 10 version 1909: same as Windows 10 version 1903

Windows Server products

• Windows Server 2008 R2: 19 vulnerabilities: 1 critical and 12 important.
  • CVE-2020-0611 | Remote Desktop Client Remote Code Execution Vulnerability
• Windows Server 2012 R2: 26 vulnerabilities: 3 critical and 23 important.
  • CVE-2020-0609 | Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
  • CVE-2020-0610 | Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
  • CVE-2020-0611 | Remote Desktop Client Remote Code Execution Vulnerability
• Windows Server 2016: 31 vulnerabilities: 3 critical and 28 important.
  • same as Windows Server 2012 R2
• Windows Server 2019: 33 vulnerabilities: 3 critical and 30 are important
  • same as Windows Server 2012 R2

Other Microsoft Products

• Internet Explorer 11: 1 vulnerability: 1 critical
  • CVE-2020-0640 | Internet Explorer Memory Corruption Vulnerability
• Microsoft Edge: none
• Microsoft Edge on Chromium: none

Windows Security Updates


Windows 7 SP1 and Windows Server 2008 R2 SP1

• Monthly Rollup: KB4534310
• Security Only: KB4534314

Improvements and fixes:

• Security updates to the Microsoft Scripting Engine, Windows Input and Composition, Windows Storage and Filesystems, and Windows Server.

Windows 8.1 and Windows Server 2012

• Monthly Rollup: KB4534297
• Security Only: KB4534309

Improvements and fixes:

• Fixes an issue with the new SameSite cookie policies for Google Chrome 80.
• Security updates to the Microsoft Scripting Engine, Windows Input and Composition, Windows Media, Windows Storage and Filesystems, and Windows Server.

Windows 10 version 1803

• Support article: KB4534293

Improvements and fixes:

• Security updates to the Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Input and Composition, Windows Media, Windows Virtualization, Windows Storage and Filesystems, and Windows Server .

Windows 10 version 1809

• Support article: KB4534273

Improvements and fixes:

• Fixes an issue with the new SameSite cookie policies for Google Chrome 80.
• Security updates to Windows App Platform and Frameworks, Windows Input and Composition, Windows Management, Windows Cryptography, Windows Virtualization, the Microsoft Scripting Engine, and Windows Server.

Windows 10 version 1903

• Support article: KB4528760

Improvements and fixes:

• Security updates to Windows App Platform and Frameworks, Windows Input and Composition, Windows Management, Windows Cryptography, Windows Storage and Filesystems, the Microsoft Scripting Engine, and Windows Server.

Windows 10 version 1909

• Support article: KB4528760

Improvements and fixes:

• Same as Windows 10 version 1903

Other security updates

• Coming when published by Microsoft

Known Issues


Windows 8.1 and Server 2012 R2

• Long standing issue: certain rename operations on files or folders on Cluster Shared Volumes may fail.

Windows 10 version 1803

• Same as Windows 8.1 plus
• Issue with creating local user accounts during the Out of Box Experience.

Windows 10 version 1809

• Same as Windows 10 version 1803 plus
• Devices with certain Asian language packs may throw the error 0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_FOUND.

Security advisories and updates

• Coming when published by Microsoft

Non-security related updates

• Coming when published by Microsoft

Microsoft Office Updates


You find Office update information here.

How to download and install the January 2020 security updates




The security updates are made available via Windows Update, WSUS, and other updating tools and services. Most home users get the updates automatically via Windows Updates; those who do not want to wait for Windows to pick up the newly released updates can run a manual check for updates to speed up the process.

Note: we recommend that important data is backed up before any updates are installed.

Do this to run a manual check for updates:

1. Open the Start Menu of the Windows operating system, type Windows Update and select the result.
2. Select check for updates in the application that opens. Updates may be installed automatically when they are found or offered by Windows; this depends on the operating system and version that is used, and update settings.

Direct update downloads


Windows 7 SP1 and Windows Server 2008 R2 SP

• KB4534310 -- 2020-01 Security Monthly Quality Rollup for Windows 7
• KB4534314 -- 2020-01 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB4534297 -- 2020-01 Security Monthly Quality Rollup for Windows 8.1
• KB4534309 -- 2020-01 Security Only Quality Update for Windows 8.1

Windows 10 (version 1803)

• KB4534293 -- 2020-01 Cumulative Update for Windows 10 Version 1809

Windows 10 (version 1809)

• KB4534273 -- 2020-01 Cumulative Update for Windows 10 Version 1809

Windows 10 (version 1903)

• KB4528760 -- 2020-01 Cumulative Update for Windows 10 Version 1903

Windows 10 (version 1909)

• KB4528760 -- 2020-01 Cumulative Update for Windows 10 Version 1909

Additional resources

• January 2020 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates January 2020 overview (end of Windows 7 support edition) appeared first on gHacks Technology News.

read more...

 

End of Support for Microsoft Security Essentials and Windows 7: January 14, 2020

Will Microsoft Security Essentials (MSE) continue to protect my computer after the end of support?

No, your Windows 7 computer is not protected by MSE after January 14, 2020. MSE is unique to Windows 7 and follows the same lifecycle dates for support. Learn
more about MSE.

Source:
https://support.microsoft.com/en-us/help/4527878/faq-about-extended-security-updates-for-windows-7


Also:
https://support.microsoft.com/en-us/help/4057281/windows-7-support-will-end-on-january-14-2020

================================================================================

EDIT: Both above articles got updated. Article 4527878 on Dec 18, 2019, Article 4057281 on Dec 16, 2019:

" Microsoft Security Essentials (MSE) will continue to receive signature updates after January 14, 2020. However, the MSE platform will no longer be updated.
"

Also see:
https://techcommunity.microsoft.com/t5/Windows-AMA/Microsoft-Security-Essentials-availability-after-Win7-EOL/m-p/1070283

================================================================================

Suggest reading everything here:
Answers to common security questions - Best Practices

especially:

• Choosing an Anti-Virus Program
• Supplementing your Anti-Virus Program with Anti-Malware Tools
  

Pinned until 12/25

 

Windows 7 support will end on January 14, 2020

Windows 7 support will end on January 14, 2020. After that, technical assistance and software updates from Windows Update that help protect your PC will no longer be available for the product. While you could continue to use your
PC running Windows 7, without continued software and security updates, it will be at greater risk for viruses and malware. Microsoft strongly recommends that you move to a new PC running Windows 10 sometime before January 2020 to avoid a situation where you
need service or support that is no longer available.

Want to learn more about Windows 7 end of support? Check out these
frequently asked questions. And if you haven’t already, check out
microsoft.com/windows7 to learn what you can do to prepare for end of support. From backing up your files to finding a new computer that fits your needs, we’ve got
tools to help you transition with ease.

 

Microsoft Increases Windows Vista & 7 Consumer Support to Ten Years

Redmond-based software giant Microsoft Corp. has recently updated its support policy for both Windows Vista and Windows 7 and will be offering extended support to the consumer versions of the two operating systems.

Previously, Microsoft provided 5 years worth of 'mainstream support' for consumers while only businesses got an extra 5 years of extended support. Now, all Windows users will be able to get security updates for 10 years after the operating system's release.

As a result of the policy change, Windows Vista's consumer support was extended to April 11th, 2017. Windows 7 support will end on January 14, 2020.





Source: ZDNet