product design

Microsoft's July Patch Tuesday includes more than 130 CVEs, with at least two bugs actively exploited. One bug is a Windows Hyper-V elevation of privilege flaw, while the other is a Windows MSHTML platform spoofing vulnerability. Five critical Microsoft CVEs are identified, including RCE bugs in Windows Remote Desktop Licensing Service. Adobe's patch dump addresses seven critical bugs, while SAP released 18 new and updated patches, including a high-priority fix for a missing authorization check vulnerability. Fortinet fixed cross-site scripting and IP address validation vulnerabilities, while Citrix addressed privilege-escalation flaws. Google released patches for 27 CVEs in Android, with the worst being a critical security vulnerability in the Framework component.