Microsoft's November Patch Tuesday Addresses 5 New Zero-Day Vulnerabilities

Microsoft has released patch updates to address 63 security bugs in its software, including three zero-day vulnerabilities that are actively being exploited. The vulnerabilities include a Windows SmartScreen security feature bypass, elevation of privilege flaws in Windows DWM Core Library and Windows Cloud Files Mini Filter Driver, an ASP.NET Core denial of service vulnerability, and a Microsoft Office security feature bypass. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the three zero-day vulnerabilities to its Known Exploited Vulnerabilities catalog and urges federal agencies to apply the fixes. Other vendors have also released security updates to address vulnerabilities in their software.