Microsoft Pushes Patches for Dozens of Flaws
Summary: Microsoft released nine update bundles addressing at least 55 distinct vulnerabilities in Windows and other software, three of them rated critical and remotely exploitable. Forty-one of the flaws affect Internet Explorer, and one critical patch fixes a Group Policy vulnerability that can grant attackers administrator-level privileges on Active Directory networks.
Bottom line: The Group Policy flaw is remotely exploitable and can hand attackers administrator rights on domain-joined machines, which the source describes as potentially tens of millions of PCs, kiosks and other devices if left unpatched.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026