According to report, Microsoft (American Multinational Company) has rolled out May 2020 patch security update. The company has patched various vulnerabilities for Windows devices. Some rough patches which you may or may not have notice, we are discuss about that. For those who are not aware, Microsoft has patched 111 vulnerabilities across 12 different products from Edge to Microsoft Windows, and from Visual Studio to .NET Framework.
Patch security update is the third-largest in Microsoft’s history after the company patched 115 bugs in March 2020 and 113 in April 2020. On other hand, the company has patched Zero-Day vulnerabilities that were actively exploited in past two-three months, there are no any such bugs in this release. It means that System administrators have time at their disposal to test security patch update for bugs or other issues before deploying the updates to all their System.
Microsoft released another updates in its series of Intel Microcode Updates with the name of KB4497165 ostensibly intended to fix security holes. Many of updates have a history of series and hassles not commensurate with amount of protection they provide. The main problems are that Microsoft push it out the Automatic update without warning anybody. Many machines shouldn’t receive patch like AMD based machines which clearly don’t need an Intel patch. So if you leave your machine set to install Automatic updates, then you might get what you paid for.
Now comes 5 new Windows Zero-Days published, trend Micro’s Zero Defense Initiative has published descriptions of five new Windows Zero-Days in which four of them are dread Privilege Escalation bugs. The company didn’t patch them with May 2020 updates. We have to wait for four months to give Microsoft time to fix this hole while Windows observers especially security folks without much windows experience prone to show that there is a Zero-Day you have to patch now. Actually, Microsoft has released a fix for Zero-Day security holes that is exceedingly rare for new, widespread related security breach to appear in short order. The worst case was the Sasser worm that was patched, then exploited two weeks later.
Now, the situation is reverse; Microsoft has released a patch for CVE-2020-1048 Windows Print Spooler elevation for privilege vulnerability. This patch was publicly disclosed with statements “No exploited” immediately after patch come out May 2020 updates. Let’s take have a look at statements of security researchers on this matter.
“This vulnerability was actually disclosed to Microsoft by the research community, so the code to exploit it absolutely does exist and was disclosed, and a full write-up was posted as soon as the patch came out.”
Apart from that, Microsoft Company still has not confirmed the issue and patch not give any hints to its source or fix. Actually, this issue states that Windows 10 Cumulative update installer hits “race condition” on reboot with the user coming back in temporary profile that generate sounds like a lot of buzz words and as a result of it users run the update, reboots and the returns to clean desktop. The desktop customizations are still there as are the files, but they behave like they belong to different users. So, Microsoft should acknowledged this issue and have to fix. At the moment, they have not officially acknowledged and fixed yet.
Further report says, Microsoft has not released patch for audio drivers like Realtek Audio that causes bugs with users who have this audio driver which of course means ¾ of those with on-main board audio out there. The symptoms are that your device manger once showed “Realtek High Definition Audio” now it shows “Realtek (R)” instead. You can also see in Device Manager a new Audio device with the name of “Nahimic Mirroring device” or similar.
Actually, Realtek’s latest driver includes Nahimic software drivers for some future 3D audio enhancements. This UWP application you can get from Microsoft Store and install on your machine. In some case, installing this app and rebooting the System resolved the issue that means Realtek has gone to UWP application. But if you don’t have this, you may need to install it from Microsoft Store as well. However, this latest drivers of Realtek downloaded from their official websites seems to have some problem. I think that it is the exact same package Microsoft bundled in their driver updates.
HP computer users reported earlier this month that states KMODE_EXCEPTION_NOT_HANDLED were triggered by conflict between the support software for HP’s OMEN series of computers and one of the recent Windows Defender updates. Now, HP Company has released the patch last week called HP Software Component 188.8.131.5279 to solve the problems. This patch comes out through Windows update, even though it is listed as driver update.
One more issue revealed by Microsoft that Windows update might not be installed on your System after you shut down your computer. This activity occurs when the “Fast Startup” feature is enabled and it does not occur when you restart your computer. The company says that when you shutdown your computer while installing the update, your computer actually enters a hibernate state instead of full shutdown. So if your update requires a full shutdown, you may not get them because your shutdown is not shutdown. Since, Microsoft is working towered resolving this issue and release fix in future Windows version.
At the moment, Windows 10 version 2004 is available as latest Windows 10 update. As expected, it is full of problems. If you own one of Microsoft’s latest PCs including Surface Pro 7, Surface laptop 3 or Surface Pro X, you won’t notice the upgrade offer because the company has blacked upgrade for these devices. If you have any suggestions or queries, please write on comment box given below.
You may also read: How To Get Windows 10 May 2020 Update?