Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft released its July 2020 security updates on July 14. The Zero Day Initiative (ZDI) counted 123 CVEs and one advisory in the release, including 18 Critical and 105 Important vulnerabilities. That is ZDI’s tally—not a total established by Microsoft’s release pages—and another contemporaneous report counted 124 vulnerabilities.

The most urgent issue was CVE-2020-1350, known as SIGRed: a critical, wormable remote-code-execution flaw in Windows DNS Server. Microsoft urged administrators to install the update promptly. If rapid patching was impractical, it also documented a temporary registry workaround.

What did Microsoft’s July 2020 security release include?

The updates were released July 14, 2020, across a broad range of Microsoft products. ZDI reported 123 CVEs and one advisory, with 18 rated Critical and 105 Important. Because a separate contemporaneous report counted 124 vulnerabilities, the headline figure should be understood as ZDI’s reported count rather than a settled Microsoft-published total. ZDI’s July 2020 Security Update Review

The release affected products including Windows, Windows Server, Internet Explorer, Microsoft Office, Skype for Business, Visual Studio, .NET Framework, and Lync Server. ZDI also listed Edge, ChakraCore, OneDrive, Azure DevOps, and open-source software. The Canadian Centre for Cyber Security’s monthly rollup summarizes products receiving critical patches; administrators should check Microsoft’s Security Update Guide and the relevant product KB pages to determine which updates apply to their environment. Canadian Centre for Cyber Security: July 2020 monthly rollup

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.

What was CVE-2020-1350 (SIGRed)?

CVE-2020-1350 was a remote-code-execution vulnerability in Microsoft’s Windows DNS Server role implementation. Microsoft assigned it a CVSS base score of 10.0 and described it as wormable. An unauthenticated remote attacker could send malicious requests to an affected server; the Cyber Security Agency of Singapore said successful exploitation could allow arbitrary code to run in the context of the Local System Account. Microsoft Security Response Center: CVE-2020-1350 Cyber Security Agency of Singapore: July 2020 Monthly Patch Release

Which systems were affected?

The issue applied to Windows Server systems running Microsoft’s DNS Server role. It did not affect non-Microsoft DNS server software. The relevant question for an administrator is therefore whether a Windows Server machine has that Microsoft role configured—not simply whether the organization uses DNS.

Rank #2
Sale
McAfee Total Protection 2027 Antivirus Software for 1 Device | Auto-Renews
  • THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
  • PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
  • SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
  • GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
  • MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.

Why was “wormable” significant?

A wormable flaw can spread from one vulnerable system to another without requiring a user to open a file or take another action. That potential for propagation made prompt action important even though Microsoft said on July 14, 2020, that it was not then aware of active attacks exploiting CVE-2020-1350. That statement describes Microsoft’s awareness when the post was published; it is not a claim about exploitation at later dates.

How should administrators respond to CVE-2020-1350?

Install the applicable Windows update

Microsoft’s primary recommendation was to apply the Windows security update as soon as possible. The exact update depends on the Windows Server version and environment, so use the Microsoft Security Update Guide and product-specific KB information to identify the applicable package. Microsoft’s July 14 post also said that customers with automatic updates enabled did not need additional action for the update, but administrators should still verify deployment according to their normal patch-management process. Microsoft’s CVE-2020-1350 guidance

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Webroot Internet Security Plus | Antivirus Software 2026 | 3 Device | 1 Year Keycard for PC/Mac/Chromebook/Android/IOS + Password Manager | Packaged Version
  • STAY PROTECTED EVERYWHERE you go, at home, in a café, at the airport—everywhere—on ALL YOUR DEVICES, with cloud-based protection against viruses & other online threats
  • Webroot PASSWORD MANAGER by Last Pass creates, encrypts, and saves all your passwords, so you only have to remember one.
  • As the #1 TRUSTED PROVIDER OF THREAT INTELLIGENCE, you know you’re in good hands. Stay safe from viruses, ransomware, phishing, and more.
  • Webroot SOFTWARE UPDATES ITSELF AUTOMATICALLY, so you always have the most current protection without lifting a finger—and updates happen in the background so they won’t slow you down.
  • PREMIUM FEATURES: Encrypts & protects passwords and account information for all your devices so you can stay protected wherever you are.

Use Microsoft’s registry workaround only if needed

If installing the update quickly was impractical, Microsoft documented a registry workaround that did not require a server restart. Treat it as a temporary mitigation, not a substitute for patching: consult Microsoft’s original advisory for the exact registry settings and configuration details, and follow your organization’s change-control procedures. Microsoft’s CVE-2020-1350 guidance

Check whether a government directive applies

CISA issued Emergency Directive 20-03 on July 16, 2020, addressing the DNS flaw for specified U.S. federal executive branch departments and agencies. It should not be read as a directive legally covering private organizations or every U.S. entity. Organizations outside that scope can still use Microsoft’s technical guidance to assess and mitigate the issue. CISA Emergency Directive 20-03

Rank #4
Sale
Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]
  • ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
  • TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
  • ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
  • REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
  • DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How were the July updates delivered?

Delivery and servicing details varied by product. For one specific example, Microsoft’s July 14 Windows 10 update KB4565513 was available through Windows Update or Microsoft Update, the Microsoft Update Catalog, and Windows Server Update Services (WSUS). Microsoft recommended installing the latest applicable servicing stack update before the latest cumulative update; in the configuration described on that page, Windows Update offered the servicing stack update automatically. These details concern that Windows 10 package and should not be generalized to every product in the monthly release. Microsoft Support: KB4565513

KB4565513’s Windows 10 release notes listed security updates involving the Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Apps, Graphics Component, Input and Composition, Media, Shell, Store, Internet Explorer, Cloud Infrastructure, Fundamentals, Kernel, MSXML, File Server and Clustering, Remote Desktop, Update Stack, JET Database Engine, and .NET Framework. This illustrates why checking the package and components relevant to a particular system matters more than relying on a monthly headline count. Microsoft Support: KB4565513

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
Webroot Internet Security Complete | Antivirus Software 2026 | 5 Device | 1 Year Download for PC/Mac/Chromebook/Android/IOS + Password Manager, Performance Optimizer
  • POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
  • IDENTITY THEFT PROTECTION AND ANTI-PHISHING: Webroot protects your personal information against keyloggers, spyware, and other online threats and warns you of potential danger before you click
  • SUPPORTS ALL DEVICES: Compatible with PC, MAC, Chromebook, Mobile Smartphones and Tablets including Windows, macOS, Apple iOS and Android
  • NEW SECURITY DESIGNED FOR CHROMEBOOKS: Chromebooks are susceptible to fake applications, bad browser extensions and malicious web content; close these security gaps with extra protection specifically designed to safeguard your Chromebook
  • PASSWORD MANAGER: Secure password management from LastPass saves your passwords and encrypts all usernames, passwords, and credit card information to help protect you online

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.