Critical Zero-Day Flaws Fixed By Microsoft, Notepad on December Patch Tuesday
The Register
|
Contributed by: Drex DeFord
Summary
December's Patch Tuesday saw significant updates from top tech firms, notably Microsoft, which addressed 57 critical vulnerabilities (CVEs), including one zero-day exploit that could allow local privilege escalation through the Windows Cloud Files Mini Filter Driver. This poses a serious threat as attackers with existing code execution can escalate their access to system-level controls. Notepad++ also responded to an active security risk that allowed traffic hijacking from its updater, emphasizing the need for stringent validation processes in software updates. These vulnerabilities highlight the ongoing challenges in securing healthcare technology systems, which often rely on software integrations that can be targeted by cyber threats.
