Microsoft Fixes Five Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20659 | Windows Hyper-V Security Feature Bypass Vulnerability | 7.1 | <1% | ||
CVE-2024-43573+1 related CVE | Spoofing Vulnerability in Microsoft Windows MSHTML Platform Exploited in the Wild | 8.1 group max | 46% | KEV | KEV |
| CVE-2024-43583 | Winlogon Elevation of Privilege Vulnerability | 7.8 | 1% | ||
| CVE-2024-6197 | libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string | 7.5 | 4% | PoC |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has patched two zero-day bugs under active exploitation and a further three that were publicly disclosed in this month’s Patch Tuesday update round. CVE-2024-43572 is a remote code execution (RCE) vulnerability in the Microsoft Management Console with a CVSS score of 7. 8.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.