Microsoft Patch Tuesday Resolves RCE Flaws in MSHTML

Microsoft has issued over 60 security patches to address identified vulnerabilities, including a remote code execution (RCE) flaw in MSHTML that is used in a limited number of attacks on Windows systems and other serious bugs.

According to the Zero Day Initiative, 11 vulnerabilities were filed for a total of 86 CVEs, including 66 CVEs (three critical, one moderate, and the rest classified as important) and 20 CVEs patched earlier by Microsoft Edge (Chromium) in early September.

Some other known vulnerabilities patched by Microsoft include CVE-2021-38647, a critical bug that affects the Open Management Infrastructure(OMI) and allows attackers to conduct RCE attacks without authentication by sending malicious messages via HTTP to port 5986.

For more information, read the original story in ZDNet.

Microsoft Patch Tuesday Resolves RCE Flaws in MSHTML

Top Stories

Meta CTO admits employee morale among worst in company’s history

Ontario Residents to gain free credit lock protection

How can project sponsors help projects succeed?

AI pioneer Yann LeCun calls Elon Musk’s xAI a ‘failure’

Microsoft sued by shareholders over Azure growth and AI spending

SpaceX shares fall 20% from peak following $60 billion cursor acquisition

Related Articles

Hackers used Meta’s AI support bot to hijack 20,000 Instagram accounts

New ‘HTTP/2 Bomb’ attack can crash major web servers from a single computer

CISA exposed internal passwords and cloud keys in public repository

Canvas restores service after cyberattack disrupted schools and universities

TND News Desk

TND News Desk

Jim Love