Microsoft, Apple fix exploited flaws on Patch Tuesday

Microsoft, Apple fix exploited flaws on Patch Tuesday

Patch Tuesday: Plus: All the fun and frolic of fixes from Adobe, SAP, Ivanti

Microsoft's Patch Tuesday closes 72 vulnerabilities, including 5 zero-days

Microsoft addressed 72 vulnerabilities affecting its core products and underlying systems, including five actively exploited zero-days across various Windows components, the company said in its latest security update Tuesday. “This is now the eight consecutive Patch Tuesday on which Microsoft has published zero-day vulnerabilities without evaluating any of them as critical severity at time of publication,” Adam Barnett, lead software engineer at…

Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws

Today is Microsoft's May 2025 Patch Tuesday, which includes security updates for 72 flaws, including five actively exploited and two publicly disclosed zero-day vulnerabilities.

Multiple vulnerabilities have been discovered in Microsoft Office. They allow an attacker to cause arbitrary code execution remotely. See online: https://www.cert.ssi.gouv.fr/avis/C...

Windows Common Log File System 0-Day Vulnerability Actively Exploited In The Wild - Cybernoz - Cybersecurity News

Microsoft has confirmed that threat actors are actively exploiting two critical vulnerabilities in the Windows Common Log File System (CLFS) driver to gain SYSTEM-level privileges on compromised systems. The vulnerabilities, tracked as CVE-2025-32706 and CVE-2025-32701, were addressed in the May 2025 Patch Tuesday security update released on May 13, 2025. Critical Vulnerabilities Under Active Exploitation Both vulnerabilities allow authorized at…

Microsoft Patch Tuesday May 2025: 5 Zero Days, 8 High-Risk

Microsoft Patch Tuesday for May 2025 included five actively exploited zero days and another eight vulnerabilities judged to be at high risk of attack. Microsoft Patch Tuesday May 2025 included fixes for 78 Microsoft vulnerabilities in all – six of which were reported and fixed last week – and five Chromium-based Microsoft Edge vulnerabilities. The vulnerabilities reported earlier included critical Azure vulnerabilities rated as high as 10.0 that…