Microsoft Patches Over 30 Flaws, Including Two Dozen Office RCEs

Microsoft released fixes for more than 30 vulnerabilities, most of them in the Office suite. Two dozen patches address high-severity remote code execution flaws, including six exploitable via the Preview Pane. None of the issues were exploited in the wild as zero-days.

• 24 high-severity RCE flaws patched in Office
• 6 bugs can be triggered via the Preview Pane
• Word got the most patches; Excel, Outlook, PowerPoint and SharePoint fewer
• Also fixed: DoS in ASP.NET Core and info disclosure in MSAL for Node.js