Microsoft Releases Security Updates For Some, Not All, Flaws

After delaying its Patch Tuesday security release slated for February 14 reportedly owing to a last-minute hitch, Microsoft this week issued security patches but only for some vulnerabilities, Fixes for two known zero-day vulnerabilities were not addressed in the release, notes security expert Graham Cluley.

The February 21 release covers vulnerabilities in Adobe Flash Player for Internet Explorer users on Windows 8.1 and Edge for Windows 10. Missing, however, were the flawed Windows handling of SMB traffic and another software bug made public by Google last week.

Both these flaws can be exploited if not fixed soon: exploit code for the flaw involving memory corruption bug was published on GitHub, for example, and can be used to launch distributed Denial-of-service attacks.

Read more here.