Microsoft, Google, and Mozilla all issued critical patches in the last week. Updating and patching these systems is critical to protecting yourself and your organization.

Google has released security updates for its Chrome browser that are in response to researcher discoveries. There are no reported exploitations in the wild yet, but it is only a matter of time. Google also released a big update to its Pixel phones, which reportedly addresses several critical and high rated severity vulnerabilities.

Microsoft released several patches for its Windows operating systems and Office software as part of its regular Tuesday patch disclosure. A critical Outlook vulnerability is being highlighted as as it could lead to remote code execution of a victims system just by opening a properly formatted email. This implies an attacker could take over a victim’s machine simply by sending a specially crafted email. There are no known exploitations in the wild yet.

Mozilla has patched several critical and high severity flaws in its Firefox web browser that could allow an attacker to run arbitrary code on a system if the users clicks on the wrong URL or document.

What do I need to do?

Users should complete the installation of patches when prompted and not delay or defer them.

Users of Google Chrome Pixel mobile phones should check for and install updates manually.

Manual update instructions are below:

• Updates can be checked and manually installed for Windows and MacOS systems by following these directions:
  • Apple MacOS: https://support.apple.com/en-us/HT201541
  • Microsoft Windows: https://support.microsoft.com/en-us/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a
• Users should check for and install updates for Google Pixel phones.
  • Pixel Phone: https://support.google.com/pixelphone/answer/7680439?hl=en
• Update Mozilla Firefox: https://support.mozilla.org/en-US/kb/update-firefox-latest-release
• Update Google Chrome: https://support.google.com/chrome/answer/95414

Additional Details:

• https://www.securityweek.com/microsoft-patches-zero-click-outlook-vulnerability-that-could-soon-be-exploited/
• https://www.securityweek.com/google-warns-of-pixel-firmware-zero-day-under-limited-targeted-exploitation/
• https://www.securityweek.com/chrome-126-firefox-127-patch-high-severity-vulnerabilities/

As always if you have any additional questions or concerns about this latest security disclosure, please feel free to reach out.