March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21338 | Local Privilege Escalation in Microsoft Windows Kernel via Exposed IOCTL (CVE-2024-21338) | 7.8 | 62% | KEVRansomwarePoC ×3 | KEV |
| CVE-2024-21390 | Microsoft Authenticator Elevation of Privilege Vulnerability | 7.1 | 1% | ||
| CVE-2024-21400 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability | 9.0 | 2% | ||
CVE-2024-21407+3 related CVEs | Windows Hyper-V Remote Code Execution Vulnerability | 8.1 group max | 16% | ||
| CVE-2024-26170 | Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability | 7.8 | 7% | ||
| CVE-2024-26182 | Windows Kernel Elevation of Privilege Vulnerability | 7.8 | 6% | ||
| CVE-2024-26198 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 | 7% |
From the original article
3 min read at helpnetsecurity.com
On this March 2024 Patch Tuesday, Microsoft has released fixes for 59 CVE-numbered vulnerabilities, but – welcome news! – none of them are currently publicly known or actively exploited. Last month, though, several days after Patch Tuesday, the company updated two advisories to say that those particular vulnerabilities were being exploited in the wild.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.