Security News > 2020 > February > Microsoft Patches IE Zero-Day, 98 Other Vulnerabilities
Microsoft disclosed the existence of the Internet Explorer zero-day on January 17, when it promised to release patches and provided a workaround.
Microsoft has credited Google's Threat Analysis Group and Chinese cybersecurity firm Qihoo 360 for reporting the vulnerability.
Microsoft has also patched four important-severity vulnerabilities that have been publicly disclosed before the company released fixes.
In total, the company has patched a dozen vulnerabilities rated critical in Windows and its web browsers.
Trend Micro's Zero Day Initiative has looked at Microsoft's advisories and highlighted one vulnerability in Exchange that can be exploited for code execution by sending a specially crafted email to the target.
News URL
Related news
- Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws (source)
- Microsoft fixes exploited zero-day (CVE-2024-49138) (source)
- Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws (source)
- Microsoft fixes actively exploited Windows Hyper-V zero-day flaws (source)
- 3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update (source)