Microsoft have released a security advisory on the 10th of November 2020 in line with their regular monthly patch schedule which includes a number of updates to address critical vulnerabilities.
System / Technology components affected include Azure, Microsoft Office, Windows, Extended Security Updates (ESU), Developer Tools, Browser and Exchange Server.
These updates address vulnerabilities which may impact Denial of Service, Elevation of Privilege, Remote Code Execution, Security Restriction Bypass, Information Disclosure, Spoofing and Data Manipulation.
https://msrc.microsoft.com/update-guide/releaseNote/2020-Nov
The following operating systems/applications are affected:
- Microsoft Windows
- Microsoft Office and Microsoft Office Services and Web Apps
- Internet Explorer
- Microsoft Edge (EdgeHTML-based)
- Microsoft Edge (Chromium-based)
- ChakraCore
- Microsoft Exchange Server
- Microsoft Dynamics
- Microsoft Windows Codecs Library
- Azure Sphere
- Windows Defender
- Microsoft Teams
- Azure SDK
- Azure DevOps
- Visual Studio
Matsco recommends any affected systems are updated as soon as convenient