Page 3 - Microsoft Patch Tuesday News Today

Microsoft has released Patch Tuesday updates for Windows 8.1 and Windows 7. Both patches fix several issues on each Windows version but both also carry known issues, luckily, there are workarounds.

This month’s Patch Tuesday was light on patches compared to other months but includes six that are designed to patch zero day-related vulnerabilities, four of which are relevant to the elevation of privilege flaws.

To embed, copy and paste the code into your website or blog: The recent spate of apparently eastern European cyberattacks on important U.S. commercial interests—from SolarWinds to Colonial Pipeline—should force all of us to step back and review how we organize our world. Many crucial points of modern life are simply too vulnerable to being shut down at the whim of a political adversary. Some of this problem arises from both the complexity of our system and the interconnectivity at its core....

The recent spate of cyberattacks on U.S. commercial interests—from SolarWinds to Colonial Pipeline—should force all of us to step back and review how we organize our world. Many crucial points of modern life are simply too vulnerable to being shut down on a whim.

This month brought patches for 55 CVEs in Microsoft Windows, Microsoft Office, .NET Core and Visual Studio, Internet Explorer, SharePoint Server, Hyper-V, Skype for Business and Microsoft Lync, Open Source Software, and Exchange Server. Fifty of these vulnerabilities are classified as Important in severity, one as Moderate. One concerning CVE to prioritize is CVE-2021-31166, a critical remote code execution flaw in the HTTP protocol stack with a CVSS score of 9.8. An attack using this would b...