Microsoft has just released this month’s security updates for its products. Before getting on with the list of applications that got fixes this Patch Tuesday, here are the patch figures: 76 vulnerabilities were addressed of which 20 are rated critical, 53 are rated important, and the rest are rated moderate.
Product and software updates
This month’s Patch Tuesday covers updates for the following list of products and software:Â
-
Adobe Flash Player
-
Internet Explorer
-
Microsoft Edge
-
Microsoft Windows
-
Microsoft Office and Microsoft Office Services and Web Apps
-
ChakraCore
-
.NET Framework
-
Microsoft Exchange Server
-
Microsoft Visual Studio
-
Azure IoT SDK
-
Microsoft Dynamics
-
Team Foundation Server
-
Visual Studio Code
Critical vulnerabilities
This month’s security updates come with nearly 20 critical fixes. Fifteen of these updates address vulnerabilities in scripting engines and browsers. Of these critical updates, one patch for Windows DHCP is especially important because it seals a security loophole that allows an attacker to take control of a DHCP server, and this vulnerability is already actively being exploited in the wild. There is also another important remote code execution vulnerability in SharePoint Server that was addressed this month.
Third-party patches:Â Adobe updates
Adobe has addressed a total of 75 vulnerabilities this month, releasing information about these flaws under Bulletin ID APSB19-07. Of these 75 patches, 43 are rated critical; most of these critical updates address vulnerabilities that can lead to arbitrary code execution on an active user session.
Non-security updates
This Patch Tuesday, Microsoft also released non-security updates for Office 2010, Office 2013, and Office 2016. View the entire list of non-security updates for the month of February.
Automate both Microsoft and third-party updates
Microsoft and other third-party vendors release patches to ensure users are secure. If your organization needs to deploy Microsoft and third-party updates to every one of your network endpoints, automated patch deployment is a great feature to have. ManageEngine offers two solutions for automating deployment tasks: Desktop Central and Patch Manager Plus. Download to start your free, 30-day trial.
