VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, July 2024 Edition

Krebs on SecurityJul 9, 2024 · 21:17 UTC (Jul 9, 2024)4 min read4 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-38080 CVE-2024-38112 CVE-2024-38021 CVE-2023-23397 CVE-2024-38053 CVE-2024-38077 CVE-2024-38074 CVE-2024-38076

Tags: cve-2024-38080 cve-2024-38112 cve-2024-38021 cve-2023-23397 cve-2024-38053 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-23397	Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak)	9.8	97%	KEV	Mar 14, 2023 KEV Mar 14, 2023
CVE-2024-38021	Microsoft Outlook Remote Code Execution Vulnerability	8.8	3%		Jul 9, 2024
CVE-2024-38053	Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability	8.8	1%		Jul 9, 2024
CVE-2024-38077 +2 related CVEs CVE-2024-38074 CVE-2024-38076	Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability	9.8	84%		Jul 9, 2024
CVE-2024-38112 +1 related CVE CVE-2024-38080	Windows MSHTML Platform Spoofing Vulnerability Exploited in the Wild (CVE-2024-38112)	7.5 group max	84%	KEV	Jul 9, 2024 KEV Jul 9, 2024

From the original article

4 min read at krebsonsecurity.com

Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two of the vulnerabilities in active attacks against Windows users.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.