Selain merilis update untuk Insiders, Microsoft juga merilis update untuk semua versi Windows 10 yang telah rilis sebelumnya. Sama dengan update untuk Insiders, update ini juga menargetkan pada celah keamanan yang ditemukan sebelumnya (CVE-2020-0601).
CVE-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.
An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. The user would have no way of knowing the file was malicious, because the digital signature would appear to be from a trusted provider.
A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software.
The security update addresses the vulnerability by ensuring that Windows CryptoAPI completely validates ECC certificates.
Berikut daftar semua versi Windows 10 yang mendapatkan update:
- Windows 10, versi 1507, Threshold 1: KB4534306 (Build 10240.18453)
- Windows 10, versi 1607, Anniversary Update: KB4534271 (Build 14393.3443)
- Windows 10, versi 1703, Creators Update: KB4534296 (Build 15063.2254)
- Windows 10, versi 1709, Fall Creators Update: KB4534276 (Build 16299.1625)
- Windows 10, versi 1803, April 2018 Update: KB4534293 (Build 17134.1246)
- Windows 10, versi 1809, October 2018 Update: KB4534273 (Build 17763.973)
- Windows 10, versi 1903, May 2019 Update: KB4528760 (Build 18362.592)
- Windows 10, versi 1909, November 2019 Update: KB4528760 (Build 18363.592)
Seperti biasa, kamu bisa mendapatkan update ini melalui halaman Windows Update di Settings. Atau download secara manual melalui Catalog Windows Update.
Source: Microsoft Security Response Center (CVE-2020-0601)
