Microsoft Patches Actively Exploited Flaws in WordPad, Skype For Business

Microsoft has issued patches for two vulnerabilities that are being exploited in the wild, including an elevation-of–privilege flaw in Skype for Business and an information disclosure bug in WordPad.

The two important-severity flaws are publicly known and are part of Microsoft’s regularly scheduled Patch Tuesday releases, which overall included more than 100 fixes. Microsoft said that one of the actively-exploited flaws, in its Skype for Business application (CVE-2023-41763), could allow threat actors that successfully exploited it to view “some sensitive …

actively exploited bug business disclosure exploited flaw flaws for business important information information disclosure microsoft patch patches patch tuesday privilege releases severity skype tuesday vulnerabilities