Microsoft's April 2016 Patch Tuesday Addresses 30 Vulnerabilities, Including 2 0-Days
Microsoft's April 2016 Patch Tuesday has arrived, addressing a significant number of vulnerabilities across its products, including Microsoft 365. Notably, Adobe has also released updates, including a patch for a 0-day exploit in Flash Player.
Microsoft issued 11 bulletins, fixing a total of 30 vulnerabilities, including two 0-days. MS16-042, a critical bulletin, tackles four flaws in Microsoft Office, including a Remote Code Execution vulnerability in RTF files. MS16-037 and MS16-038, both critical, address six vulnerabilities each in Internet Explorer and Edge respectively. MS16-039 patches two 0-days in Windows, allowing privilege escalation.
Adobe, last week, patched Adobe Flash Player (APSB16-10) to fix a 0-day exploit. They also released updates for Robohelp (APSB16-12) and Creative Cloud Desktop (APSB16-11).
The 'Badlock' vulnerability, a Man-in-the-Middle type issue affecting Windows Vista to Server 2012R2, is addressed by Microsoft in MS16-047, categorized as 'important'.
Microsoft's April 2016 updates cover a wide range of critical and important vulnerabilities in Microsoft 365. Users are advised to apply these updates promptly to ensure system security. Adobe's recent patches also address significant issues, including a 0-day exploit in Flash Player.