Security News > 2021 > January > January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE
Microsoft has plugged 83 CVEs, including a Microsoft Defender zero-day.
One of the latter - a zero-day RCE affecting Microsoft Defender antivirus - is being exploited in the wild, but Microsoft didn't reveal more about these attacks.
"This bug in the Microsoft Malware Protection Engine may already be patched on your system as the engine auto-updates as needed. However, if your systems are not connected to the Internet, you'll need to manually apply the patch," Trend Micro Zero Day Initiative's Dustin Childs commented.
Among the critical flaws fixed on this January 2021 Patch Tuesday by Microsoft are five Remote Procedure Call runtime RCEs.
The rest of the patched flaws affect a wide variety of Microsoft solutions, including the Bot Framework SDK, Hyper-V, Microsoft Office, SharePoint, Windows Bluetooth, Windows CSC Service, and so on.
For January 2021 Patch Tuesday, SAP has released 10 new security notes and updated 7 previously released ones.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/qb6ZXdq2XV0/
Related news
- Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws (source)
- Patch Tuesday: Microsoft fixes 5 actively exploited zero-days (source)
- Microsoft's May Patch Tuesday update fails on some Windows 11 VMs (source)
- Week in review: Google fixes exploited Chrome zero-day, Patch Tuesday forecast (source)
- Critical Erlang/OTP SSH pre-auth RCE is 'Surprisingly Easy' to exploit, patch now (source)
- Critical Erlang/OTP SSH RCE bug now has public exploits, patch now (source)
- Emergency patch for potential SAP zero-day that could grant full system control (source)
- Craft CMS RCE exploit chain used in zero-day attacks to steal data (source)
- Microsoft pitches pay-to-patch reboot reduction subscription for Windows Server 2025 (source)
- May 2025 Patch Tuesday forecast: Panic, change, and hope (source)