NEW Microsoft releases emergency update to fix two serious Windows flaws ( CVE-2020-1425 / CVE-2020-1457 )

[Ketankamble3894]

Microsoft releases emergency update to fix two serious Windows flaws

https://www.welivesecurity.com/2020...s-emergency-update-two-serious-windows-flaws/

I do understand it is only customers who have installed the optional HEVC or “HEVC from Device Manufacturer” media codecs from Microsoft Store may be vulnerable.

So but if we need to force the update on users machines remotely (from SCCM ,PowerShell script ) how we can do that for this software’s ?

In windows store setting suppose user selected the option to turn off automatic update ,then how we can proceed ?

Is there any way we can force it via script or do we have offline package or installer for the same ?

I have created Query to find our non compliant versions :

select sms.name0, sms.User_Name0, gsapp.ApplicationName0, gsapp.Version0, case when parsename(gsapp.Version0,2) < '31822' then 'NONCOMPLIANT' else 'COMPLIANT' end as status from v_r_system sms join v_GS_WINDOWS8_APPLICATION gsapp on gsapp.ResourceID=sms.ResourceID where gsapp.ApplicationName0 like '%Microsoft.HEVCVideoExtension%'

 

[Ketankamble3894]

Please don't say This is not applicable for the organization doesn’t use Microsoft store . We have store enabled I wanted to have a way to force this application update from SCCM.

 

[Ketankamble3894]

Prajwal, I am Still waiting for anyone response