Skip to content

Microsoft's April 2016 Patch Tuesday Addresses 30 Vulnerabilities, Including 2 0-Days

Microsoft's April updates cover critical flaws in Office, IE, Edge, and Windows. Adobe patches a 0-day in Flash Player.

This is a picture of a screen , where there are some icons , and there is a popup message on it.
This is a picture of a screen , where there are some icons , and there is a popup message on it.

Microsoft's April 2016 Patch Tuesday Addresses 30 Vulnerabilities, Including 2 0-Days

Microsoft's April 2016 Patch Tuesday has arrived, addressing a significant number of vulnerabilities across its products, including Microsoft 365. Notably, Adobe has also released updates, including a patch for a 0-day exploit in Flash Player.

Microsoft issued 11 bulletins, fixing a total of 30 vulnerabilities, including two 0-days. MS16-042, a critical bulletin, tackles four flaws in Microsoft Office, including a Remote Code Execution vulnerability in RTF files. MS16-037 and MS16-038, both critical, address six vulnerabilities each in Internet Explorer and Edge respectively. MS16-039 patches two 0-days in Windows, allowing privilege escalation.

Adobe, last week, patched Adobe Flash Player (APSB16-10) to fix a 0-day exploit. They also released updates for Robohelp (APSB16-12) and Creative Cloud Desktop (APSB16-11).

The 'Badlock' vulnerability, a Man-in-the-Middle type issue affecting Windows Vista to Server 2012R2, is addressed by Microsoft in MS16-047, categorized as 'important'.

Microsoft's April 2016 updates cover a wide range of critical and important vulnerabilities in Microsoft 365. Users are advised to apply these updates promptly to ensure system security. Adobe's recent patches also address significant issues, including a 0-day exploit in Flash Player.

Read also:

Latest