Microsoft’s October Patch Batch Fixes 62 Flaws
Summary: Microsoft released updates on Tuesday fixing at least 62 security vulnerabilities in Windows, Office and other software, 28 of which were rated critical. Two flaws were publicly disclosed before the patches, and one Office bug (CVE-2017-11826) is already being exploited in active attacks via booby-trapped Word files.
What's compelling: Attackers already have a head start on a flaw that lets them take over a system when someone opens a malicious Word document, and a separate DNS bug in Windows 8 and Windows Server 2012 can be exploited easily by anyone who controls or compromises a local network such as a Wi-Fi hotspot.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-11776CVE-2017-11779CVE-2017-11826CVE-2017-8703
- Related
- CVE-2017-11826: Microsoft Office Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026