Vulnerabilitycritical
Patch Tuesday, May 2024 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-30040 | Actively Exploited Security Feature Bypass in Microsoft Windows MSHTML Platform | 8.8 | 4% | KEV | KEV |
| CVE-2024-30044 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 7.2 | 84% | ||
| CVE-2024-30051 | Elevation of Privilege in Microsoft Windows DWM Core Library (Actively Exploited) | 7.8 | 6% | KEVRansomware | KEV |
From the original article
3 min read at krebsonsecurity.comMicrosoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two “zero-day” vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, and for the Chrome Web browser, which just patched its own zero-day flaw. First, the zero-days.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.