Microsoft Security Updates For May 2020

Microsoft have released security updates for May 2020.

Summary of the updates (filter by inserting 04/14/2020 to the From field and 05/13/2020 to the To field) here.

Mozilla Thunderbird Vulnerabilities Fixed

Mozilla have released an updated version of their Thunderbird email client containing fixes to security vulnerabilities of which some critical.

Affected versions:
Mozilla Thunderbird versions earlier than 68.8.0

Fresh version can be obtained via inbuilt updater or by downloading from the product site.

Firefox Updated

Mozilla have released new versions of their Firefox web browser. New versions contain fixes to security vulnerabilities of which many are critical and high categorized.

Affected versions:
-Mozilla Firefox earlier than 76 (advisory)
-Mozilla Firefox ESR 68.x earlier than 68.8 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading (latest version) from the product site.

Google Chrome Updated

Google have released a version 81.0.4044.138 of their Chrome web browser. In addition to other changes three security vulnerabilities were fixed. More information about changes can be viewed in Google Chrome release blog.

Ninja Forms Vulnerability Fixed

There has been released an update to Ninja Forms which is a WordPress plugin with over 1 million installations. The updated version fixes a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2020-12462).

Affected versions:
Ninja Forms versions earlier than 3.4.24.2

More information in Wordfence blog here.

VMware ESXi Updated

VMware have released updated versions of VMware ESXi. Updates fix one important categorized cross-site scripting (XSS) vulnerability (CVE-2020-3955).

Affected versions:
-ESXi 6.7 without Patch Release ESXi670-202004103-SG
-ESXi 6.5 without Patch Release ESXi650-201912104-SG

More information in VMware advisories here.

WordPress 5.4.1 Released

There has been released a new version of WordPress (blogging tool and content management system). Version 5.4.1 fixes security bugs.

Affected versions:
WordPress versions earlier than 5.4.1

More information can be read from the WordPress blog.