Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-38021 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | 3% | ||
CVE-2024-38023+1 related CVE | Microsoft SharePoint Server Remote Code Execution Vulnerability | 7.2 | 53% | ||
| CVE-2024-38060 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | 16% | ||
| CVE-2024-38062 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 | 2% | ||
CVE-2024-38077+2 related CVEs | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | 9.8 | 84% | ||
| CVE-2024-38080 | Actively Exploited Local Privilege Escalation in Microsoft Windows Hyper-V | 7.8 | 7% | KEV | KEV |
| CVE-2024-38094 | Authenticated deserialization RCE in Microsoft SharePoint Server | 7.2 | 51% | KEVRansomware | KEV |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update on Tuesday, disclosing 142 vulnerabilities across its suite of products and software. Of those, there are five critical vulnerabilities, and every other security issue disclosed this month is considered "important." This is the largest Patch Tuesday since April when Microsoft patched 150 vulnerabilities.
By Tiago Pereira · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.