#patch-tuesday
#patch-tuesday
[ follow ]
Information security
fromComputerworld
1 month agoFor March, Patch Tuesday delivers fixes for 83 vulnerabilities
Microsoft's March Patch Tuesday addresses 83 vulnerabilities including two zero-day exploits in SQL Server and .NET, while introducing Common Log File System hardening with signature verification.
fromComputerworld
2 months agoFebruary's Patch Tuesday release fixes 59 flaws, including 6 being exploited
Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February addresses 59 CVEs across the company's product family - roughly half the volume of January's 159 patches. Six vulnerabilities, affecting Windows Shell, MSHTML, Desktop Window Manager, Remote Desktop, Remote Access, and Microsoft Word, are already being actively exploited.
Information security
Gadgets
fromZDNET
2 months agoMicrosoft's latest update patches six zero-days and two critical flaws - but is it another buggy mess?
February Patch Tuesday refreshes Secure Boot certificates and fixes Windows 11/10 feature and security bugs such as full‑screen gaming, WPA3 connectivity, fonts, GPUs, and File Explorer.
Information security
fromThe Hacker News
2 months agoOver 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms
Vendors released critical security patches across Microsoft, Adobe, SAP, and Intel TDX, addressing actively exploited zero-days, code-injection, authorization flaws, and multiple other vulnerabilities.
fromSecurityWeek
2 months ago6 Actively Exploited Zero-Days Patched by Microsoft With February 2026 Updates
CVE-2026-21510: a Windows SmartScreen and Windows Shell security prompts bypass that can be exploited by convincing the targeted user to open a malicious link or shortcut file. CVE-2026-21514: a vulnerability that allows an attacker to bypass OLE mitigations in Microsoft 365 and Office by tricking the target into opening a malicious Office file. CVE-2026-21513: an Internet Explorer issue that allows an attacker to bypass security controls and potentially execute code by convincing the victim to open a malicious HTML or LNK file.
Information security
Information security
fromZero Day Initiative
4 months agoZero Day Initiative - The December 2025 Security Update Review
Adobe released five bulletins addressing 139 CVEs—mostly XSS in Experience Manager—with Critical DOM-based XSS and a priority-1 ColdFusion fix; Microsoft released 56 Windows CVEs.
fromTheregister
4 months agoMicrosoft fixes Windows shortcut flaw exploited for years
Researchers at Trend Micro said in March that nearly a thousand malicious .lnk samples dating back to 2017 exploited this weakness across a mix of state-sponsored and cybercriminal campaigns worldwide. "Our analysis revealed that 11 state-sponsored groups from North Korea, Iran, Russia, and China have employed ZDI-CAN-25373 in operations primarily motivated by cyber espionage and data theft," it said at the time.
Information security
fromTechzine Global
5 months agoMicrosoft tells Windows 11 23H2 users: upgrade to 25H2
Microsoft has released the Patch Tuesday updates for November 2025. For home users of Windows 11 23H2, this also means the end of support. The company is urging users to switch to version 25H2. Microsoft previously announced that Windows 11 23H2 Home and Pro would no longer be supported as of November 11, 2025. Enterprise and Education editions will continue to receive updates until November 2026.
Gadgets
[ Load more ]