› News › Security › Patch Tuesday › Latest Patch Tuesday updates fix an astonishing 99 CVEs Latest Patch Tuesday updates fix an astonishing 99 CVEs

-
february patch tuesday fixes 99 cves
Microsoft just released the second major round of updates for the year 2020, and they bring improvement and fixes for several features, including:

99 different CVEs were fixed by this latest update

Adobe products

The Adobe release for February includes five bulletins addressing a total of 42 CVEs in Framemaker, Experience Manager, Adobe Digital Editions, Flash, and Acrobat and Reader. It is worth mentioning that Framemaker alone needed fixes for 21 Critical-rated bugs.
Acrobat and Reader was second place with 17 CVEs associated with it, most of which were Use-After-Free (UAF) bugs. Third place was Adobe Digital Editions with 2 CVEs, and Flash Player with only one CVE.
Microsoft patches
The February security release consists of security updates that fixed 99 different CVEs for the following software:
  • Microsoft Windows
  • Windows Malicious Software Removal Tool
  • Microsoft Edge (EdgeHTML-based)
  • Microsoft Edge (Chromium-based)
  • ChakraCorepatch
  • Internet Explorer
  • Microsoft Exchange Server
  • Microsoft SQL Server
  • Windows Surface Hub
  • Microsoft Office and Microsoft Office Services and Web Apps
12 of these CVEs were listed as Critical, and the other 87 were classified as Important in severity.

Which were some of the most severe CVEs?

Some of the most important CVEs, out of which some were also exploited to a certain degree, are the following:
  • Scripting Engine Memory Corruption Vulnerability
  • Microsoft Exchange Memory Corruption Vulnerability
  • LNK Remote Code Execution Vulnerability
  • Microsoft Secure Boot Security Feature Bypass Vulnerability
  • Windows Remote Code Execution Vulnerability
These are the most important CVEs covered by Microsoft during the February 2020 round of Patch Tuesday Updates. For the next set of updates, users will have to wait until March 10.

How do I get the latest updates?

The updates are available via all known sources, which include:
  • Windows Update
  • Microsoft Update
  • Windows Server Update Services (WSUS)
  • Direct downloads on the Microsoft Update Catalog website

Comments

Post a Comment

Popular posts from this blog

What is Game?

-
Image
/ The term "game" can refer to various concepts depending on the context: 1. **A Recreational Activity**: In its most general sense, a game is an activity or form of play governed by a set of rules or customs, often undertaken for enjoyment and sometimes used as an educational tool. 2. **Video Games**: In the context of technology and entertainment, a game often refers to a digital game played on electronic devices such as computers, consoles, or mobile devices. These games can range from simple puzzle games to complex, immersive virtual worlds. 3. **Sports**: Games can also refer to organized athletic competitions governed by rules and regulations, such as football, basketball, or chess. 4. **Board Games and Card Games**: These are physical games played on a tabletop using pieces, cards, or other components, often involving strategic thinking, luck, or both. 5. **Role-Playing Games (RPGs)**: These are games where players assume the roles of characters in a fictional setting
Read more

FIX: User profile or private key are not accessible

-
Image
To fix various PC problems, we recommend this tool: This software will repair common computer errors, protect you from file loss, malware, hardware failure and optimize your PC for maximum performance. Fix PC issues and remove viruses now in 3 easy steps: Download this PC Repair Tool  rated  Great  on TrustPilot.com. Click  Start Scan  to find Windows issues that could be causing PC problems. Click  Repair All  to fix issues with Patented Technologies (Exclusive Discount for our readers). A Secure Sockets Layer, also known as an SSL,  is a standard security technology for establishing an encrypted link between a server and a client. Manipulating isn’t all that easy, and it can usually result in error messages if not done right. One good example is when you try to import a Secure Sockets Layer (SSL) private key certificate file into the local computer personal certificate store. Many users  reported  having issues when trying to do so, and have reported receiv
Read more

23AndMe Hacker Leaks New Tranche of Stolen Data

-
Image
  Two weeks after the first data leak from the DNA ancestry service, the threat actor produces an additional 4 million user records they purportedly stole. A threat actor who claimed responsibility for the compromise of the 23AndMe site earlier this month has released a new dataset, including the records of more than 4 million people's genetic ancestry. The cybercriminal, known by the handle Golem, alleges in a cybercrime Dark Web forum the stolen data includes information on, "the wealthiest people living in the US and Western Europe," according to reports. 23andMe spokesperson Andy Kill said in a statement the organization is still trying to confirm whether the most recently leaked data is genuine. Prior to this most recent leak, an Oct. 1 post on a Dark Web forum by Golem claimed they have a total of 20 million individual pieces of 23andMe data and leaked 1 million lines of data as a teaser, along with an offer to bulk sell data profiles. 23andMe confirmed in early Oct
Read more