Vulnerabilitycritical
Microsoft Patches One Critical and One Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-50868 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU… | 7.5 | 74% | PoC | |
| CVE-2024-30080 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 | 43% | ||
CVE-2024-30104+1 related CVE | Microsoft Office Remote Code Execution Vulnerability | 7.8 group max | 2% |
From the original article
1 min read at infosecurity-magazine.com
System administrators have had a relatively quiet June Patch Tuesday after Microsoft revealed updates for just 51 vulnerabilities, only one of which was rated “critical.” That bug ( CVE-2024-30080 ) is a remote code execution (RCE) flaw in Microsoft Message Queuing (MSMQ) and has been assigned a CVSS score of 9. 8, with exploitation rated as “more likely” by Microsoft.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.