5ÔÂ12ÈÕ£¬£¬£¬Î¢ÈíÐû²¼ÁË2020Äê5Ô·ݵÄÔ¶ÈÀýÐÐÇ徲ͨ¸æ£¬£¬£¬ÐÞ¸´ÁËÆä¶à¿î²úÆ·±£´æµÄ111¸öÇå¾²Îó²î¡£¡£¡£¡£ÊÜÓ°ÏìµÄ²úÆ·°üÀ¨£º£º£ºWindows 10 1909 & WindowsServer v1909£¨78¸ö£©¡¢¡¢Windows 10 1903 & WindowsServer v1903£¨78¸ö£©¡¢¡¢Windows 10 1809 & WindowsServer 2019£¨75¸ö£©¡¢¡¢Windows 8.1 & Server 2012 R2£¨30¸ö£©¡¢¡¢Windows Server 2012£¨27¸ö£©¡¢¡¢Windows RT 8.1£¨29¸ö£©¡¢¡¢Microsoft Edge (EdgeHTML-based)£¨5¸ö£©¡¢¡¢Internet Explorer£¨7¸ö£©ºÍMicrosoft Office-related software£¨12¸ö£©¡£¡£¡£¡£
ʹÓÃÉÏÊöÎó²î£¬£¬£¬¹¥»÷Õß¿ÉÒÔ»ñÈ¡Ãô¸ÐÐÅÏ¢£¬£¬£¬ÌáÉýȨÏÞ£¬£¬£¬ÓÕÆ£¬£¬£¬ÈƹýÇå¾²¹¦Ð§ÏÞÖÆ£¬£¬£¬Ö´ÐÐÔ¶³Ì´úÂ룬£¬£¬»ò¾ÙÐоܾø·þÎñ¹¥»÷µÈ¡£¡£¡£¡£ÇëMicrosoftÓû§¾¡¿ìÏÂÔØ²¹¶¡¸üУ¬£¬£¬×èÖ¹Òý·¢Îó²îÏà¹ØµÄÍøÂçÇå¾²ÊÂÎñ¡£¡£¡£¡£
CVE±àºÅ | ͨ¸æÎÊÌâºÍÕªÒª | ×î¸ßÑÏÖØÆ·¼¶ºÍÎó²îÓ°Ïì | ÊÜÓ°ÏìµÄÈí¼þ |
CVE-2020-1126 | Media FoundationÄÚ´æÆÆËðÎó²î µ±Windows Media FoundationδÄÜ׼ȷ´¦ÀíÄÚ´æÖеŤ¾ßʱ£¬£¬£¬±£´æÄÚ´æÆÆËðÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔ×°ÖóÌÐò£»Éó²é¡¢¡¢¸ü¸Ä»òɾ³ýÊý¾Ý£»»ò½¨Éè¾ßÓÐÍêÈ«Óû§È¨ÏÞµÄÐÂÕÊ»§¡£¡£¡£¡£ ¹¥»÷ÕßÓжàÖÖÒªÁì¿ÉÒÔʹÓôËÎó²î¾ÙÐй¥»÷£¬£¬£¬ÀýÈç˵·þÓû§·¿ªÈ«ÐÄÌåÀýµÄÎĵµ£¬£¬£¬»ò˵·þÓû§»á¼û¶ñÒâÍøÒ³¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ý¸üÕýWindows Media FoundationÈçÄÇÀïÖÃÄÚ´æÖеŤ¾ßÀ´½â¾ö´ËÎó²î¡£¡£¡£¡£ | ÑÏÖØ Ô¶³ÌÖ´ÐдúÂë | Windows 10 Server, version 1803 Server, version 1903 Server, version 1909 Server 2016 Server 2019 |
CVE-2020-1118 | Microsoft Windows Transport Layer¾Ü¾ø·þÎñÎó²î µ±´«Êä²ãÇå¾²£¨TLS£©µÄWindowsʵÏÖδÄÜ׼ȷµØ´¦ÀíijЩÃÜÔ¿½»Á÷ʱ£¬£¬£¬±£´æ¾Ü¾ø·þÎñÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õ߿ɵ¼ÖÂÄ¿µÄϵͳ×èÖ¹ÏìÓ¦¡£¡£¡£¡£ ҪʹÓôËÎó²î£¬£¬£¬Î´ÂÄÀúÖ¤µÄÔ¶³Ì¹¥»÷Õß¿ÉÒÔʹÓÃTLS 1.2»ò¸üµÍ°æ±¾ÏòÄ¿µÄϵͳ·¢ËÍÈ«ÐÄÌåÀýµÄÇëÇ󣬣¬£¬´Ó¶ø´¥·¢ÏµÍ³×Ô¶¯ÖØÐÂÆô¶¯¡£¡£¡£¡£ ¸üÐÂͨ¹ý¸ü¸ÄÑéÖ¤TLSÃÜÔ¿½»Á÷ÐÂÎŵķ½Ê½À´½â¾ö¸ÃÎó²î¡£¡£¡£¡£ | Ö÷Òª ¾Ü¾ø·þÎñ | Windows 10 Server, version 1803 Server, version 1903 Server, version 1909 Server 2019 |
CVE-2020-1153 | Microsoft Graphics×é¼þÔ¶³Ì´úÂëÖ´ÐÐÎó²î Microsoft Graphics×é¼þ´¦ÀíÄÚ´æÖй¤¾ßµÄ·½Ê½±£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔÔÚÄ¿µÄϵͳÉÏÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£ ҪʹÓôËÎó²î£¬£¬£¬Óû§±ØÐè·¿ªÈ«ÐÄÌåÀýµÄÎļþ¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ý¸üÕýMicrosoftͼÐÎ×é¼þÈçÄÇÀïÖÃÄÚ´æÖеŤ¾ßÀ´½â¾ö´ËÎó²î¡£¡£¡£¡£ | ÑÏÖØ Ô¶³ÌÖ´ÐдúÂë | Windows 10 Server, version 1803 Server, version 1903 Server, version 1909 Server 2016 Server 2019 Windows 8.1 Server 2012 Server 2012 R2 |
CVE-2020-1112 | Windows Background Intelligent Transfer ServiceȨÏÞÌáÉýÎó²î µ±Windows Background Intelligent Transfer Service (BITS) IISÄ£¿£¿éδÄÜ׼ȷµØ´¦ÀíÉÏ´«µÄÄÚÈÝʱ£¬£¬£¬±£´æÈ¨ÏÞÌáÉýÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔ½«ÊÜÏÞÖÆµÄÎļþÀàÐÍÉÏÔØµ½ÒÔIISΪÖ÷»úµÄÎļþ¼Ð¡£¡£¡£¡£ ҪʹÓôËÎó²î£¬£¬£¬¹¥»÷Õß½«ÐèҪͨ¹ýBITSÉÏÔØÎļþµÄȨÏÞ¡£¡£¡£¡£È»ºó£¬£¬£¬¹¥»÷Õß¿ÉÒÔÌá½»¹¹½¨µÄÎļþÉÏ´«ÇëÇ󡣡£¡£¡£ Çå¾²¸üÐÂͨ¹ý¸üÕýWindows BITSÔõÑùÑéÖ¤ÎļþÃûÀ´½â¾ö¸ÃÎó²î¡£¡£¡£¡£ | Ö÷Òª ÌØÈ¨ÌáÉý | Windows 10 Server, version 1803 Server, version 1903 Server, version 1909 Server 2016 Server 2019 Windows 8.1 Server 2012 Server 2012 R2 |
CVE-2020-1174 | Jet Database EngineÔ¶³Ì´úÂëÖ´ÐÐÎó²î µ±Windows JetÊý¾Ý¿âÒýÇæÎ´ÄÜ׼ȷµØ´¦ÀíÄÚ´æÖеŤ¾ßʱ£¬£¬£¬±£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔÔÚÊܹ¥»÷ϵͳÉÏÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£ ¹¥»÷Õß¿ÉÒÔͨ¹ýÓÕʹÊܺ¦Õß·¿ªÈ«ÐÄÌåÀýµÄÎļþÀ´Ê¹ÓôËÎó²î¾ÙÐй¥»÷¡£¡£¡£¡£ ¸üÐÂͨ¹ý¸üÕýWindows JetÊý¾Ý¿âÒýÇæ´¦ÀíÄÚ´æÖй¤¾ßµÄ·½Ê½À´½â¾ö¸ÃÎó²î¡£¡£¡£¡£ | Ö÷Òª Ô¶³ÌÖ´ÐдúÂë | Windows 10 Server, version 1803 Server, version 1903 Server, version 1909 Server 2016 Server 2019 Windows 8.1 Server 2012 Server 2012 R2 |
CVE-2020-1037 | Chakra Scripting EngineÄÚ´æÆÆËðÎó²î Chakra¾ç±¾ÒýÇæ´¦ÀíMicrosoft Edge (HTML-based)ÄÚ´æÖй¤¾ßµÄ·½Ê½±£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£¸ÃÎó²î¿ÉÄÜ»áÆÆËðÄڴ棬£¬£¬Ê¹µÃ¹¥»÷Õß¿ÉÒÔÔÚÄ¿½ñÓû§µÄÉÏÏÂÎÄÖÐÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔ»ñµÃÓëÄ¿½ñÓû§ÏàͬµÄÓû§È¨ÏÞ¡£¡£¡£¡£ÈôÊÇÄ¿½ñÓû§Ê¹ÓÃÖÎÀíÓû§È¨Ï޵Ǽ£¬£¬£¬ÔòÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔ¿ØÖÆÊÜÓ°ÏìµÄϵͳ¡£¡£¡£¡£È»ºó£¬£¬£¬¹¥»÷Õß¿ÉÒÔ×°ÖóÌÐò£»Éó²é¡¢¡¢¸ü¸Ä»òɾ³ýÊý¾Ý£»»ò½¨Éè¾ßÓÐÍêÈ«Óû§È¨ÏÞµÄÐÂÕÊ»§¡£¡£¡£¡£ ÔÚ»ùÓÚwebµÄ¹¥»÷³¡¾°ÖУ¬£¬£¬¹¥»÷Õß¿ÉÒÔÍйÜÈ«ÐÄÌåÀýµÄÍøÕ¾£¬£¬£¬¸ÃÍøÕ¾Ö¼ÔÚͨ¹ýMicrosoft Edge (HTML-based)ʹÓøÃÎó²î£¬£¬£¬È»ºó˵·þÓû§Éó²é¸ÃÍøÕ¾¡£¡£¡£¡£¹¥»÷Õß»¹¿ÉÒÔʹÓÃÊܹ¥»÷µÄÍøÕ¾ÒÔ¼°½ÓÊÜ»ò³ÐÔØÓû§ÌṩµÄÄÚÈÝ»ò¹ã¸æµÄÍøÕ¾¡£¡£¡£¡£ÕâÐ©ÍøÕ¾¿ÉÄܰüÀ¨È«ÐÄÌåÀýµÄ¿ÉʹÓôËÎó²îµÄÄÚÈÝ¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ýÐÞ¸ÄChakra¾ç±¾ÒýÇæÈçÄÇÀïÖÃÄÚ´æÖеŤ¾ßÀ´½â¾ö¸ÃÎó²î¡£¡£¡£¡£ | ÑÏÖØ Ô¶³ÌÖ´ÐдúÂë | Edge (EdgeHTML-based) ChakraCore |
CVE-2020-1062 | Internet ExplorerÄÚ´æÆÆËðÎó²î µ±Internet ExplorerδÄÜ׼ȷ»á¼ûÄÚ´æÖеŤ¾ßʱ£¬£¬£¬±£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£¸ÃÎó²î¿ÉÄÜ»áÆÆËðÄڴ棬£¬£¬Ê¹µÃ¹¥»÷Õß¿ÉÒÔÔÚÄ¿½ñÓû§µÄÉÏÏÂÎÄÖÐÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔ»ñµÃÓëÄ¿½ñÓû§ÏàͬµÄÓû§È¨ÏÞ¡£¡£¡£¡£ÈôÊÇÄ¿½ñÓû§Ê¹ÓÃÖÎÀíÓû§È¨Ï޵Ǽ£¬£¬£¬Ôò¹¥»÷Õß¿ÉÒÔ¿ØÖÆÊÜÓ°ÏìµÄϵͳ¡£¡£¡£¡£È»ºó£¬£¬£¬¹¥»÷Õß¿ÉÒÔ×°ÖóÌÐò£»Éó²é¡¢¡¢¸ü¸Ä»òɾ³ýÊý¾Ý£»»ò½¨Éè¾ßÓÐÍêÈ«Óû§È¨ÏÞµÄÐÂÕÊ»§¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ýÐÞ¸ÄInternet Explorer´¦ÀíÄÚ´æÖй¤¾ßµÄ·½Ê½À´½â¾ö¸ÃÎó²î¡£¡£¡£¡£ | ÑÏÖØ Ô¶³ÌÖ´ÐдúÂë | Internet Explorer 9 Internet Explorer 11 |
CVE-2020-0901 | Microsoft ExcelÔ¶³Ì´úÂëÖ´ÐÐÎó²î µ±Èí¼þδÄÜ׼ȷ´¦ÀíÄÚ´æÖеŤ¾ßʱ£¬£¬£¬Microsoft ExcelÈí¼þÖб£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷Õß¿ÉÒÔÔÚÄ¿½ñÓû§µÄÉÏÏÂÎÄÖÐÔËÐÐí§Òâ´úÂë¡£¡£¡£¡£ÈôÊÇÄ¿½ñÓû§Ê¹ÓÃÖÎÀíÓû§È¨Ï޵Ǽ£¬£¬£¬Ôò¹¥»÷Õß¿ÉÒÔ¿ØÖÆÊÜÓ°ÏìµÄϵͳ¡£¡£¡£¡£È»ºó£¬£¬£¬¹¥»÷Õß¿ÉÒÔ×°ÖóÌÐò£»Éó²é¡¢¡¢¸ü¸Ä»òɾ³ýÊý¾Ý£»»ò½¨Éè¾ßÓÐÍêÈ«Óû§È¨ÏÞµÄÐÂÕÊ»§¡£¡£¡£¡£½«ÕÊ»§ÉèÖÃΪÔÚϵͳÉÏÓµÓнÏÉÙÓû§È¨ÏÞµÄÓû§¿ÉÄܱÈʹÓÃÖÎÀíÓû§È¨ÏÞ²Ù×÷µÄÓû§ÊÜÓ°Ïì¸üС¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ý¸üÕýMicrosoft ExcelÈçÄÇÀïÖÃÄÚ´æÖеŤ¾ßÀ´½â¾ö´ËÎó²î¡£¡£¡£¡£ | Ö÷Òª Ô¶³ÌÖ´ÐдúÂë | Excel 2010 Excel 2013 Excel 2016 Office 2019 Office 2016 for Mac Office 2019 for Mac 365 Apps Enterprise* formerly Office 365 ProPlus |
CVE-2020-1069 | Microsoft SharePoint ServerÔ¶³Ì´úÂëÖ´ÐÐÎó²î µ±Microsoft SharePoint ServerδÄÜ׼ȷʶ±ðºÍɸѡ²»Çå¾²µÄASP.Net web¿Ø¼þʱ£¬£¬£¬±£´æÔ¶³Ì´úÂëÖ´ÐÐÎó²î¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¾ÓÉÉí·ÝÑéÖ¤µÄ¹¥»÷Õß¿ÉÒÔʹÓÃÈ«ÐÄÌåÀýµÄÒ³ÃæÔÚSharePointÓ¦ÓóÌÐò³ØÀú³ÌµÄÇå¾²ÉÏÏÂÎÄÖÐÖ´ÐвÙ×÷¡£¡£¡£¡£ ҪʹÓôËÎó²î£¬£¬£¬¾ÓÉÉí·ÝÑéÖ¤µÄÓû§±ØÐèÔÚÊÜÓ°ÏìµÄMicrosoft SharePoint Server°æ±¾ÉϽ¨É貢ŲÓù¹½¨µÄÒ³Ãæ¡£¡£¡£¡£ Çå¾²¸üÐÂͨ¹ý¸üÕýMicrosoft SharePoint Server´¦ÀíÒѽ¨ÉèÄÚÈݵķ½Ê½À´½â¾ö´ËÎó²î¡£¡£¡£¡£ | ÑÏÖØ Ô¶³ÌÖ´ÐдúÂë | SharePoint Foundation 2013 SharePoint Enterprise Server 2016 SharePoint Server 2019 |
²Î¿¼ÐÅÏ¢£º£º£º
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-May