Jan 2021 Patch Tuesday Vulnerabilities Exploited in the Wild

On 2021-01-12 Microsoft released patches for multiple flaws including two high-severity issues: CVE-2021-1647 (Microsoft Defender RCE, reported exploited in the wild) and CVE-2021-1648 (splwow64 out-of-bounds read enabling privilege escalation with public PoC available for a related prior CVE); the report recommends applying Microsoft’s patches immediately as threat actors are likely to incorporate these exploits.