Microsoft February 2020 Patch Tuesday addresses 99 CVEs
Microsoft's February 2020 security updates remediated 99 CVEs, including critical flaws in Internet Explorer, Remote Desktop, Exchange, and Windows kernel components, requiring prompt patch deployment and validation across Windows fleets.
Executive briefing: On , Microsoft released security updates covering 99 CVEs across Windows, Office, Exchange Server, Internet Explorer, Edge, SQL Server, and developer tooling. Twelve vulnerabilities were rated Critical, including scripting engine memory corruption bugs and remote code execution risks in Remote Desktop clients. The release also shipped the final fix for CVE-2020-0674 in Internet Explorer, which had been under limited exploitation.
Operator action: Prioritize deployment to internet-facing servers and user workstations, especially RDP clients, IE/Edge, and Exchange. Validate application compatibility in test rings, ensure Endpoint Detection and Response tools are operational during patching, and monitor for exploit indicators tied to CVE-2020-0674 and other RCE-class issues.
Sources: Microsoft's security guidance and release notes enumerate affected products, severity, and KB numbers to guide patch sequencing.
Continue in the Infrastructure pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Edge Resilience Infrastructure Guide — Zeph Tech
Engineer resilient edge estates using ETSI MEC standards, DOE grid assessments, and GSMA availability benchmarks documented by Zeph Tech.
-
Infrastructure Resilience Guide — Zeph Tech
Coordinate capacity planning, supply chain, and reliability operations using DOE grid programmes, Uptime Institute benchmarks, and NERC reliability mandates covered by Zeph Tech.
-
Infrastructure Sustainability Reporting Guide — Zeph Tech
Produce audit-ready infrastructure sustainability disclosures aligned with CSRD, IFRS S2, and sector-specific benchmarks curated by Zeph Tech.