Hot on his heels Save Patch Tuesday Launched, Microsoft on Thursday announced patches for more than 30 new vulnerabilities.
Most of the new fixes fix security flaws in the Office suite. Twenty of them fix high severity remote code execution (RCE) bugs, including half a dozen bugs that can be targeted through the preview tab.
In most cases, exploits require an attacker to send a specially crafted file, such as a malicious document, and convince the recipient to open it.
Buffer overflow issues are to blame for most RCEs, with many bugs being closed by one, use after none, route bypass, and number truncation errors.
Word received most of the solutions, there are only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.
In addition to the RCE flaw, Microsoft has fixed several data disclosure flaws and security bypass issues in the Office suite.
In addition, it fixed Denial of Service (DoS) vulnerabilities in ASP.NET Core, privilege escalation in Web Identity, and data exposure in the Authentication Library (MSAL) for Node.js.
According to Microsoft, there are zero new problems that have been discovered in the wild.
On Thursday, Microsoft also made dozens of updates Instructions Originally published on October 13 to inform customers that security updates have been released for Office LTSC for Mac 2021 and 2024, and for Office 365 for Mac.
Related: Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Related: Cisco Warns of Exploited Secure Email Vulnerability
Related: Chrome, Firefox Updates Patch 114 Bugs While Mozilla Unveils Firefox Enterprise
