Security News > 2020 > April > Microsoft Patch Tuesday, April 2020 Edition

Microsoft today released updates to fix 113 security vulnerabilities in its various Windows operating systems and related software.

Many security news sites are reporting that Microsoft addressed a total of four zero-day flaws this month, but it appears the advisory for a critical Internet Explorer flaw has been revised to indicate Microsoft has not yet received reports of it being used in active attacks.

Researchers at security firm Recorded Future zeroed in on CVE-2020-0796, a critical vulnerability dubbed "SMBGhost" that was rumored to exist in last month's Patch Tuesday but for which an out-of-band patch wasn't released until March 12.

Recorded Future's Allan Liska notes that one reason these past few months have seen so many patches from Microsoft is the company recently hired "SandboxEscaper," a nickname used by the security researcher responsible for releasing more than a half-dozen zero-day flaws against Microsoft products last year.

Just a friendly reminder that while many of the vulnerabilities fixed in today's Microsoft patch batch affect Windows 7 operating systems - including all three of the zero-day flaws - this OS is no longer being supported with security updates.

News URL

https://krebsonsecurity.com/2020/04/microsoft-patch-tuesday-april-2020-edition/