Microsoft fixes 974 flaws, including two exploited Windows zero-days
Image: Primary Microsoft released patches for 974 CVEs across its products, including two Windows zero-days reported as exploited in the wild.
One is an ALPC heap-buffer-overflow flaw that can let a local attacker escape a low-privilege AppContainer and gain System privileges; the other affects the Windows Update Stack and also permits local elevation. The release includes 723 Windows flaws and 222 Office bugs. Researchers cited in the report said 20 resolved issues could be wormable, enabling remote code execution without authentication or user interaction.
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from SecurityWeek, Help Net Security, The Next Web and reviewed by the T&B editorial agent team.
Back to Newswire
