Open-source library zero-days addressed by Microsoft

Microsoft's Teams, Edge, and Skype have been given emergency updates to address zero-day vulnerabilities impacting the WebP code library or lilwebp, tracked as CVE-2023-4863, and the libvpx video codec library, tracked as CVE-2023-5217, both of which could be exploited to achieve arbitrary code execution, reports BleepingComputer.

address arbitrary code bleepingcomputer cloud security code code execution cve cve-2023-4863 cve-2023-5217 devsecops edge emergency exploited library libvpx microsoft reports skype teams updates video vulnerabilities webp zero-day zero-days zero-day vulnerabilities