Microsoft Issues Monster Patch Update
Summary: Microsoft released a record number of software updates to fix at least 64 security vulnerabilities in Windows and Office, including one that attackers are actively exploiting, with nine patches rated critical. Three patches were flagged as top priorities, including two for critical flaws in the SMB service (MS11-020) that could be exploited with a single crafted data packet, and MS11-018, a cumulative Internet Explorer update fixing critical flaws in all versions except IE9.
Why it matters: The SMB flaw carries high potential to power an automated computer worm, and one IE vulnerability - the MHTML flaw - is already being exploited in the wild, so the exposure is live rather than theoretical.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026