Today’s updates also address two other critical vulnerabilities in the same Windows component that handles various scripting languages. Perhaps the most concerning of those critical holes is a zero-day flaw in Internet Exploder Explorer ( CVE-2019-1429) that has already seen active exploitation.
More than a dozen of the flaws tackled in this month’s release are rated “critical,” meaning they involve weaknesses that could be exploited to install malware without any action on the part of the user, except for perhaps browsing to a hacked or malicious Web site or opening a booby-trapped file attachment. The November updates include patches for a zero-day flaw in Internet Explorer that is currently being exploited in the wild, as well as a sneaky bug in certain versions of Office for Mac that bypasses security protections and was detailed publicly prior to today’s patches. Microsoft today released updates to plug security holes in its software, including patches to fix at least 74 weaknesses in various flavors of Windows and programs that run on top of it.
0 kommentar(er)
