Microsoft has issued over 60 security patches to address identified vulnerabilities, including a remote code execution (RCE) flaw in MSHTML that is used in a limited number of attacks on Windows systems and other serious bugs.
According to the Zero Day Initiative, 11 vulnerabilities were filed for a total of 86 CVEs, including 66 CVEs (three critical, one moderate, and the rest classified as important) and 20 CVEs patched earlier by Microsoft Edge (Chromium) in early September.
Some other known vulnerabilities patched by Microsoft include CVE-2021-38647, a critical bug that affects the Open Management Infrastructure(OMI) and allows attackers to conduct RCE attacks without authentication by sending malicious messages via HTTP to port 5986.
For more information, read the original story in ZDNet.