Security News > 2021 > December > Microsoft closes installer hole abused by Emotet malware, Google splats Chrome bug exploited in the wild
Let's start with Microsoft, which put out a summary of its security updates here.
Microsoft Defender for IoT: A critical remote-code execution flaw in this security product, prior to version 10.5.2, can be exploited over a network by a non-authenticated miscreant.
Microsoft Office app: Again, Microsoft is cagey about this critical remote-code execution hole prior to versions 18.2110.13110.
"The initial deployment phase starts with the Windows updates released on December 14, 2021," Microsoft noted.
On Tuesday, Adobe patched scores of bugs in 11 of its products, including code execution holes in Photoshop, Premier Pro, and After Effects on Windows and macOS, and a privilege-escalation vulnerability in Lightroom on Windows.
There's also what's described as a "Code injection vulnerability in SAP ABAP Server & ABAP Platform," plus an SQL-injection hole in SAP Commerce, an XSS vuln in SAP Knowledge Warehouse, a command-injection flaw in SAP NetWeaver AS ABAP, and other security blunders in the enterprise IT giant's code.
News URL
https://go.theregister.com/feed/www.theregister.com/2021/12/15/patch_tesuday/
Related news
- New Android malware uses Microsoft’s .NET MAUI to evade detection (source)
- Google fixes Chrome zero-day exploited in espionage campaign (source)
- Google fixes exploited Chrome sandbox bypass zero-day (CVE-2025-2783) (source)
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)
- Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot (source)
- Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware (source)
- Fake Microsoft Office add-in tools push malware via SourceForge (source)
- Google's got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft's $20B+ security biz (source)
- Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito (source)