Microsoft closes 12 critical vulnerabilities in its software

Microsoft has released 100 patches for Windows and other software as part of its monthly patch round. Twelve of these are critical. A zero-day leak in Internet Explorer has also been patched and a paid security update for Windows 7 has been released.

In addition to the 12 critical vulnerabilities, there are 87 patches that Microsoft labels as ‘important’. The company lists 26 vulnerabilities for which patches have become available and which are provided with a CVE designation.

Apart from that, the CVE-2020-0674 vulnerability of Internet Explorer, which has been known to be actively exploited since last month, has been closed. In addition, critical vulnerabilities in the Microsoft Scripting Engine, Remote Desktop Client, and Hyper-V have been patched.

Microsoft reports that a fix for Adobe Flash vulnerabilities is available. Adobe itself announces in its Security Bulletin that it has patched 17 CVE vulnerabilities, 12 of which are critical, in its applications.

Microsoft has also released updates for Windows 7 and Windows Server 2008. These are updates available only to paid Extended Support customers. Users of Windows 10 versions 1909 and 1903 will receive an update to build versions 18362.657 and 18363.657 thanks to KB4532693, which includes fixes in addition to security vulnerabilities. The same goes for Windows 1809, which will receive an update to build version 17763.1039 thanks to KB4532691.