Microsoft released four critical fixes on Tuesday addressing flaws in Outlook, Microsoft Power Platform and a Windows developer component called MSHTML, used to add web browsing functionality to the operating system. The most serious of the flaws, a spoofing vulnerability with a CVSS rating of 9.6, opens Windows systems to code execution via a crafted link that triggers a malicious browser script capable of code execution.

Source: SC Magazine