Microsoft, Apple fix exploited flaws on Patch Tuesday

Microsoft, Apple fix exploited flaws on Patch Tuesday

Patch Tuesday: Plus: All the fun and frolic of fixes from Adobe, SAP, Ivanti

Microsoft's Patch Tuesday closes 72 vulnerabilities, including 5 zero-days

Microsoft addressed 72 vulnerabilities affecting its core products and underlying systems, including five actively exploited zero-days across various Windows components, the company said in its latest security update Tuesday. “This is now the eight consecutive Patch Tuesday on which Microsoft has published zero-day vulnerabilities without evaluating any of them as critical severity at time of publication,” Adam Barnett, lead software engineer at…

Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws

Today is Microsoft's May 2025 Patch Tuesday, which includes security updates for 72 flaws, including five actively exploited and two publicly disclosed zero-day vulnerabilities.

Microsoft fixes over 70 security flaws in Windows, Office, and Azure

Yesterday was Patch Tuesday, and Microsoft provided security updates that addressed 77 new vulnerabilities, with five security vulnerabilities in Windows already being exploited in the wild, and several others in Windows and Office being labeled as “critical.” Microsoft offers sparse details on the vulnerabilities in the Security Update Guide, but Dustin Childs goes into more detail in Trend Micro’s ZDI blog with an eye for admins who manage cor…

Multiple vulnerabilities have been discovered in Microsoft Office. They allow an attacker to cause arbitrary code execution remotely. See online: https://www.cert.ssi.gouv.fr/avis/C...

Windows Common Log File System 0-Day Vulnerability Actively Exploited In The Wild - Cybernoz - Cybersecurity News

Microsoft has confirmed that threat actors are actively exploiting two critical vulnerabilities in the Windows Common Log File System (CLFS) driver to gain SYSTEM-level privileges on compromised systems. The vulnerabilities, tracked as CVE-2025-32706 and CVE-2025-32701, were addressed in the May 2025 Patch Tuesday security update released on May 13, 2025. Critical Vulnerabilities Under Active Exploitation Both vulnerabilities allow authorized at…