Microsoft Tuesday Coverage for October 2009
Summary: Microsoft released a large batch of security advisories in October 2009, covering vulnerabilities in SMBv2.0, Windows Media Runtime and Player, IIS FTP, Internet Explorer, ActiveX handling, CryptAPI certificate handling, LSASS, ATL ActiveX controls for Office, the .NET Common Language Runtime, and GDI+, most of which may allow a remote attacker to execute code. Cisco Talos issued detection rules for each advisory, identified by GID and SID, and also released rules for multiple Adobe product vulnerabilities that may allow remote code execution.
Key Takeaway: Nearly every advisory in this release describes a remote attacker executing code, spanning core Windows services like SMBv2.0 and LSASS as well as IE, Office ActiveX controls, and .NET, so the exposure surface in a single month's patch cycle reaches well beyond the browser.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026