Back in July I wrote about two weird Microsoft Store patches for a couple of security holes in the HEVC codecs, which are programs that Microsoft crea
[See the full post at: Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem]
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem
Home » Forums » Newsletter and Homepage topics » Another HEVC codec bug fixed via the Microsoft Store – plus a couple of updates on this month’s mayhem
- This topic has 6 replies, 5 voices, and was last updated 4 years, 7 months ago.
AuthorTopicwoody
ManagerOctober 15, 2020 at 10:58 pm #2304640Viewing 2 reply threadsAuthorReplies-
Alex5723
AskWoody PlusOctober 16, 2020 at 12:59 am #2304646Microsoft updates :
* CVE-2020-16898
– CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability
– https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-16898– Version: 1.1
– Reason for Revision: The following changes have been made to further clarify the
information for this vulnerability: 1) Added FAQ and Mitigation sections 2) Added
Impact of Workaround to the Workaround section 3) Corrected the CVSS score to 8.8
4) Corrected the Exploitability Index from “1 – Exploitation More Likely” to
“2 – Exploitation Less Likely”. These are informational changes only.
– Originally October 13, 2020
– Updated: October 15, 2020
– Aggregate CVE Severity Rating: Critical-
This reply was modified 4 years, 7 months ago by
Alex5723.
1 user thanked author for this post.
-
This reply was modified 4 years, 7 months ago by
-
anonymous
GuestOctober 16, 2020 at 2:03 am #2304644So unless you’ve specifically downloaded the Microsoft codec, you don’t need to worry about it – but be aware that this one is also coming through Windows Update.
Like last time; this update is via Microsoft Store, not Windows Update:
Why are these security updates offered to affected clients via the Microsoft Store and not Windows Update?
These updates are for optional apps/components that are offered to customers as a download via the Microsoft Store. Updates for optional store apps/components are provided via the Microsoft Store.
CVE-2020-17022 | Microsoft Windows Codecs Library Remote Code Execution Vulnerability FAQBut also like last time, “Get updates” in Microsoft Store produced nothing for me. So I used this store link again which did download/install the correct update:
https://www.microsoft.com/en-us/p/hevc-video-extensions-from-device-manufacturer/9n4wgh0z6vhq
1 user thanked author for this post.
-
woody
ManagerOctober 16, 2020 at 6:22 am #2304701Like last time; this update is via Microsoft Store, not Windows Update
You’re absolutely right. I changed the main post.
-
WCHS
AskWoody PlusOctober 16, 2020 at 11:04 pm #2304880But also like last time, “Get updates” in Microsoft Store produced nothing for me. So I used this store link again which did download/install the correct update: ….
On one of my Windows 10 devices, version 1909, I have the app HEVC Video Extensions for Device Manufacturer v 1.0.32022.0 showing in Apps and Features, installed 08/07/2020. For me, also, right now “Get updates” in Microsoft Store produced nothing. I also did a search for “HEVC Video Extensions from Device Manufacturer” and nothing came up.
Then, I went to the link and it said “HEVC Video Extensions from Device Manufacturer is currently not available”.
What gives here, anyway??
-
WCHS
AskWoody PlusOctober 16, 2020 at 11:31 pm #2304885For me, also, right now “Get updates” in Microsoft Store produced nothing. I also did a search for “HEVC Video Extensions from Device Manufacturer” and nothing came up
I just now signed into my MS account and clicked “Get updates.” HEVC Video Extensions from Device Manufacturer then downloaded–v 1.0.32762.0
-
-
-
Microfix
AskWoody MVP
Viewing 2 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
Meta and Yandex secretly tracked billions of Android users
by
Alex5723
1 hour, 19 minutes ago -
MS-DEFCON 2: Do you need that update?
by
Susan Bradley
2 hours, 29 minutes ago -
What Terminal Is Southwest at Austin Airport? Find Complete AUS Terminal Info (Awaiting moderation)
by
airlinesterminaloffice1
3 hours, 26 minutes ago -
What Terminal Is Southwest at Austin Airport? Find Complete AUS Terminal Info (Awaiting moderation)
by
airlinesterminaloffice1
3 hours, 31 minutes ago -
CD/DVD drive is no longer recognized
by
WSCape Sand
13 hours, 49 minutes ago -
Windows 11 24H2 Default Apps stuck on Edge and Adobe Photoshop
by
MikeBravo
16 hours, 39 minutes ago -
North Face and Cartier customer data stolen in cyber attacks
by
Alex5723
14 hours, 44 minutes ago -
What is wrong with simple approach?
by
WSSpoke36
7 hours, 16 minutes ago -
Microsoft-Backed Builder.ai Set for Bankruptcy After Cash Seized
by
Alex5723
1 day, 2 hours ago -
Location, location, location
by
Susan Bradley
3 hours, 50 minutes ago -
Cannot get a task to run a restore point
by
CWBillow
1 day, 3 hours ago -
Frustrating search behavior with Outlook
by
MrJimPhelps
18 hours, 19 minutes ago -
June 2025 Office non-Security Updates
by
PKCano
1 day, 14 hours ago -
Secure Boot Update Fails after KB5058405 Installed
by
SteveIT
10 hours, 44 minutes ago -
Firefox Red Panda Fun Stuff
by
Lars220
1 day, 14 hours ago -
How start headers and page numbers on page 3?
by
Davidhs
2 days ago -
Attack on LexisNexis Risk Solutions exposes data on 300k +
by
Nibbled To Death By Ducks
1 day, 3 hours ago -
Windows 11 Insider Preview build 26200.5622 released to DEV
by
joep517
2 days, 9 hours ago -
Windows 11 Insider Preview build 26120.4230 (24H2) released to BETA
by
joep517
2 days, 9 hours ago -
MS Excel 2019 Now Prompts to Back Up With OneDrive
by
lmacri
1 day, 23 hours ago -
Firefox 139
by
Charlie
1 day, 15 hours ago -
Who knows what?
by
Will Fastie
18 hours, 2 minutes ago -
My top ten underappreciated features in Office
by
Peter Deegan
2 days, 10 hours ago -
WAU Manager — It’s your computer, you are in charge!
by
Deanna McElveen
3 hours, 41 minutes ago -
Misbehaving devices
by
Susan Bradley
1 day, 5 hours ago -
.NET 8.0 Desktop Runtime (v8.0.16) – Windows x86 Installer
by
WSmeyerbos
3 days, 16 hours ago -
Neowin poll : What do you plan to do on Windows 10 EOS
by
Alex5723
14 hours, 54 minutes ago -
May 31, 2025—KB5062170 (OS Builds 22621.5415 and 22631.5415 Out-of-band
by
Alex5723
3 days, 14 hours ago -
Discover the Best AI Tools for Everything
by
Alex5723
2 days, 13 hours ago -
Edge Seems To Be Gaining Weight
by
bbearren
3 days, 4 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.