Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-35264 | .NET and Visual Studio Remote Code Execution Vulnerability | 8.1 | 3% | ||
| CVE-2024-3596 | RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or… | 9.0 | 15% | ||
| CVE-2024-37985 | Windows Kernel Information Disclosure Vulnerability | 5.6 | <1% | ||
| CVE-2024-38021 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | 3% | ||
CVE-2024-38112+1 related CVE | Windows MSHTML Platform Spoofing Vulnerability Exploited in the Wild (CVE-2024-38112) | 7.5 group max | 84% | KEV | KEV |
From the original article
5 min read at thehackernews.com
Microsoft has released patches to address a total of 143 security flaws as part of its monthly security updates, two of which have come under active exploitation in the wild. Five out of the 143 flaws are rated Critical, 136 are rated Important, and four are rated Moderate in severity. The fixes are in addition to 33 vulnerabilities that have been addressed in the Chromium-based Edge browser over the past month.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.