Microsoft has released new security updates
Microsoft has released a new series of updates for September that address different versions of the Windows operating system and related software. Updates for detected vulnerabilities are available for bugs affecting Microsoft Windows, the Edge browser, Internet Explorer, ChakraCore, SQL Server, Exchange Server, Office, ASP.NET, OneDrive, Azure DevOps, Visual Studio, and Microsoft Dynamics. A total of 129 vulnerabilities have been fixed, of which 23 are classified as critical and 105 are significant and one is of moderate severity. Of these, CVE-2020-16875 is a remote code execution (RCE) error in the Microsoft Exchange server caused by incorrect validation of "cmdlet" arguments. Successfully exploited, this could allow malicious people to run arbitrary code in the context of the system user, this being done by compromising a user logged in with certain privileges in Microsoft Exchange, thus allowing the attacker to view, modify, delete data or to create new accounts. Two cr...