Microsoft has released an out of band security update today for Windows 8.1 andWindows Server 2012 R2, addressing two elevation of privilege vulnerabilities. Both can be exploited remotely, pushing the Windows maker to deliver KB4578013.

Tracked as CVE-2020-1530andCVE-2020-1537, Microsoft said that the bugs were fixed in all the supported operating systems through the August 11 monthly cumulative updates. Today's note reads:

Take action: August 19, 2020: Windows 8.1 and Windows Server 2012 R2 out of band security update available

An out of band security update has been released for Windows 8.1 and Windows Server 2012 R2. This update addresses two WindowsRemote Access Elevation of Privilege vulnerabilities. We recommend that you install these updates promptly. For information about the update, seeKB4578013. For more informationabout these vulnerabilities,seeCVE-2020-1530andCVE-2020-1537.

Out of band Windows update fixes two security vulnerabilities

CVE-2020-1530 is a "Windows Remote Access Elevation of Privilege Vulnerability" that exists whenWindows Remote Access improperly handles memory. An attacker would first need to gainexecution on the victim system and then run a specially crafted application to elevate privileges.

"The security update addresses the vulnerability by correcting how Windows Remote Access handles memory," Microsoft writes.

The second vulnerability, tracked as CVE-2020-1537, is anelevation of privilege flaw that exists when the Windows Remote Access improperly handles file operations. "An attacker who successfully exploited this vulnerability could gain elevated privileges," the company explains.

To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application.

The security update addresses the vulnerability by ensuring the Windows Remote Access properly handles file operations.

For more details on KB4578013 for Windows 8.1 and Windows Server 2012 R2, head over to the official support document.

- Earlier: Microsoft Says You Won’t Be Able to Uninstall Its New Edge Browser | Workaround