April 2020 and – rest assured – your Windows PC can still be pwned by something so innocuous as an unruly font

2020-04-14 22:02

A fifth flaw, was publicly disclosed but not exploited in the wild.

Of more interest are the critical flaws in Hyper-V and VBScript that allow remote code execution via a guest account or a VBScript engine code break.

Adobe skipped updates for Flash this month, opting instead to put out fixes for a local privilege escalation flaw in ColdFusion, an information disclosure hole in After Effects, and an information disclosure flaw in Digital Editions.

Over in the realm of Chipzilla, we have six patches for various firmware flaws.

They include escalation of privilege flaws in the NUC firmware, escalation of privilege bugs in the Intel Binary Configuration Tool, escalation of privilege errors in the Modular Server Compute Module , Denial of Service bugs in the Driver and Support Assistant, and elevation of privilege flaw in ProSet/Wireless Wifi, and an escalation of privilege error in the Intel Data Migration Software.

News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/04/14/april_patch_tuesday/

#windows