Welcome to the overview for Microsoft's March 2020 Patch Day; the company released security updates for all supported versions of Microsoft Windows as well as other company products.
The overview provides you with important information about released patches. It includes links to support articles and summaries of patches, links to security advisories, non-security updates, as well as direct download links for Windows updates.
Feel free to check out the February 2020 Patch Day overview here.
You may download the following Excel spreadsheet to get a full tabular listing of patches and updates that Microsoft released on the March 2020 Patch Day. Click on the following link to download the Excel spreadsheet to your local system: microsoft-security-updates-windows-march-2020
Windows Server products
Other Microsoft Products
Windows 7
Improvements and fixes:
Windows 8.1
Improvements and fixes:
Windows 10 version 1803
Support article: KB4540689
Improvements and fixes:
Windows 10 version 1809
Support article: support
Improvements and fixes:
Windows 10 version 1903 and 1909
Support article: KB4540673
Improvements and fixes:
Other security updates
KB4540671 -- 2020-03 Cumulative Security Update for Internet Explorer
KB4540694 -- 2020-03 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012
KB4541504 -- 2020-03 Security Only Quality Update for Windows Server 2008
KB4541506 -- 2020-03 Security Monthly Quality Rollup for Windows Server 2008
KB4541510 -- 2020-03 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012
KB4539571 -- 2020-03 Servicing Stack Update for Windows Server 2019 and Windows 10 Version 1809
KB4540670 -- 2020-03 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607
KB4540681 -- 2020-03 Cumulative Update for Windows 10 Version 1709
KB4540693 -- 2020-03 Cumulative Update for Windows 10 Version 1507
KB4540705 -- 2020-03 Cumulative Update for Windows 10 Version 1703
KB4540721 -- 2020-03 Servicing Stack Update for Windows 10 Version 1507
KB4540722 -- 2020-03 Servicing Stack Update for Windows 10 Version 1703
KB4540723 -- 2020-03 Servicing Stack Update for Windows Server 2016 and Windows 10 Version 1607
KB4540724 -- 2020-03 Servicing Stack Update for Windows 10 Version 1803
KB4540725 -- 2020-03 Servicing Stack Update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2
KB4540726 -- 2020-03 Servicing Stack Update for Windows Embedded 8 Standard and Windows Server 2012
KB4541338 -- 2020-03 Servicing Stack Update for Windows Server, version 1909, Windows 10 Version 1909, Windows Server, version 1903, and Windows 10 Version 1903
KB4541731 -- 2020-03 Servicing Stack Update for Windows 10 Version 1709
KB4550735 -- 2020-03 Servicing Stack Update for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2
KB4550736 -- 2020-03 Servicing Stack Update for Windows Server 2008
Windows 7
Windows 8.1
Windows 10 version 1809
Windows 10 version 1903 and 1909
KB890830 -- Windows Malicious Software Removal Tool - March 2020
You find Office update information here.
Security updates for all supported version of Windows and products included in Windows, e.g. Microsoft Edge, are made available via Windows Update, WSUS, and other update distribution systems. Administrators may download standalone patches to systems to apply these directly without using Windows Updates.
We recommend that backups are created of important date or, better, the entire system, before patches are installed.
Do the following to check for new updates:
Windows 7 and Server 2008 R2
Windows 8.1 and Windows Server 2012 R2
Windows 10 (version 1803)
Windows 10 (version 1809)
Windows 10 (version 1903)
Windows 10 (version 1909)
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.
After 5 years I think if Microsoft does not have a handle on keeping these updates reasonably free of issues that it probably never will. I’ve mostly been OK with these updates but I have not installed them as soon as they are released. I certainly do not install any update that is not required. If your going to Windows update and begging for updates and install anything listed. Your volunteering for a headache and problems. You have agreed to be a beta tester for Microsoft.
I install security updates right away, as I don’t want to volunteer to be exploited by malware.
In over 30 years with Microsoft I have never had an issue with my updates.
Also, if you study the actual numbers involved with OS updates and related issues, Microsoft is not alone in these complex tasks.
I always install updates and in 10 years of doing kind of work I have only seen two times where the udpates have actually caused an issue. I have installed thousands of updates on tens of thousands of servers and workstations updates rarely cause issues.
7 critical vulnerabilities, and I just uupdated last month. ‘ Time speeds up when…
Thanks, Martin, For this ferry helpfull body of work you deliver every mounth!
Thanks martin. Already update security-only using bypass version-four and it works.
The current Servicing Stack Update (SSU) information at
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001
shows what SSU Windows Update should automatically pick up if run today. A home user can confirm this by running Belarc Advisor.
>Windows 10 version 1809: 73 vulnerabilities: 7 critical and 66 important
Since last month? o.O
I didn’t see any comment. Just test if I can see this comment. Need to make sure, is it my browser or is it no comment at all.
At first it’s hidden. After I post the comment I can see all the comment. it’s weird.
If running Windows 7 SSU released in January 2020 (which allows ESU updates to install with BypassESU v4), the new March 2020 Security Only Update and Security Monthly Quality Rollup packages will request a newer SSU (these newer SSUs will render the BypassESU useless). Wait for a new BypassESU version that can workaround this.
I can confirm the “Lite” method to keep receiving Windows 7 updates, found in MDL forums, also works with all March 2020 updates. MUUUUAAAHHHHAAAHHHHHHAAAAAA!
I’m currently downloading this update on 1909. I wonder what is going to happen given the recent issues that came up from the previous optional update. I didn’t try to remove it since I didn’t notice anything suspicious. Will this update override the previous one? Will it fix the problems?
Also, I stay firm on my belief that MS should focus on only fixing things for one month at least, and then improve and introduce new features. Having constantly new features is a bug-fixing nightmare.
That’s why Windows 7 eventually became the best OS ever built. Because they weren’t introducing new features, just fixing bugs and improving the existing ones for long time.
@Deo et Patriae
Windows 8.1 + Classic Shell was and is better than Windows 7 in every aspect imaginable. Metro was the only weakness of Windows 8.1, but it can be turned off, if you know how.
Problem is some hardware doesn’t have support (i.e. drivers, in particular) for Windows 8/8.1.
There are even worse cases: Ryzen motherboards that work only with Windows 7 or 10. I know you will probably say, what? Then, I invite you to Google MSI B450 based motherboards and see their OS support specs.
Yes that was very nefarious of the CPU/GPU/MB makers and MS and that skipping over 8/8.1 for driver support to force more folks onto that 10/Rolling Release madness that’s rolling over its end users on a monthly basis.
But I’ve got a new laptop running 1809 Home and maybe I’ll be forced to install 1909 before 2004 comes in April, if 2004 is going to be forced on me before 1809 goes EOL. But I’m really waiting for the Linux 5.6 Kernel to become available for Linux Mint and better support for my laptop’s Ryzen 3000 series APU’s power management.
I’m keeping the 1809 laptop offline as a March 2019 patch delay option and will keep that laptop offline for another week or so just in case for patch vetting reasons. But really I’ve got 4 other laptops running Linux Mint 19.3 and 7(EOL) dual boot and maybe I’ll mothball the new laptop until Kernel 5.6 is offered for Mint 19.3/later. With all the other things going on I’ve got plenty of time and available laptops that boot into Mint to do most of what I need currently. And 7’s kept around on those laptops for offline only legacy Windows usage.
I’m not going to be a forced BETA tester for the folks in Redmond and It’s only a matter of time before my newest laptop gets Mint/Kernel 5.6 installed alongside 1809/1909, and Kept offline like 7/EOL as well. The Ryzen 3000 series APUs have been on the market since Q1 2019 so a little more time for that support to be fully included mostly by Kernel 5.6 and most issues resolved for getting that laptop running under Mint 19.3/later so I can avoid most of these 10 issues forced upon the 10/Home end users. The old Windows 7 laptops sure are a bit more responsive and boot faster under Mint 19.3 and that’s not so bad for my complete control over my own laptops’ update management unlike 10’s forced madness.
Windows 8.1 here. Message on screen during reboot of KB4541505, “We couldn’t complete the update. Undoing changes”. Anyone else see that?
Prior to that installation attempt KB4540725 which is the SSU for this month installed without a problem.
Well, I fixed it. Error code according to the Reliability Monitor was 0x800F0921. Couldn’t find anything relevant with that code on the web so ran DISM.exe with the Restorehealth flag, downloaded and ran the installer again and lo and behold KB4541505 installed without a hitch. :)
Martin:
Version 1909 & 1909 users got a quick out-of-band security update on TH March 12 – KB4551762
https://support.microsoft.com/help/4551762/
https://www.askwoody.com/2020/heads-up-microsoft-posts-a-fix-for-that-smbv3-security-hole-get-ready-to-install-this-months-windows-patches/
DOH! I meant “1903 & 1909 users”
Per https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 I successfully installed KB4551762 using Windows Update, bringing me to Microsoft Windows [Version 10.0.18363.720].
Server KB4494175 and KB4540670 – The error is on server “An existing connection was forcibly closed by the remote host” which we believe is SSL related error. Eventually the job would run correctly but would fail initially and this was causing all kinds of issues. The host server is a MS SQL server which is where we uninstalled the updates. Once we removed the two patches above it seemed to have fixed the issue. I think I got this right I do the security not the IT stuff.
Has anyone seen any issues with the two KB’s above?
Hi Michael,
do you have any update on this issue? We’re having the exact same issue.
Thank you in advance.
Can someone help me clarify this please? Per ” https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirements-for-windows “, are we safe to deploy all updates from March released and also from ” https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023 “? There is not binding policy made ready yet by our Active Directory Group Policy team yet at this moment.
I have currently updated my Windows 10 Home to OS Build 18363.753 without any problems at all.