First Microsoft Patch Tuesday zero-day of 2024 disclosed as part of group of 75 vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20684 | Windows Hyper-V Denial of Service Vulnerability | 6.5 | 1% | ||
| CVE-2024-21351 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 7.6 | 28% | KEV | KEV |
| CVE-2024-21357 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 8.1 | 27% | ||
CVE-2024-21378+1 related CVE | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 group max | 11% | ||
| CVE-2024-21380 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability | 8.0 | 2% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft followed up one of the lightest recent Patch Tuesdays in January with a large release of vulnerabilities on Tuesday, although still far from numbers seen in the past. In all, February’s security update from Microsoft includes 75 vulnerabilities, three of which are considered critical. There are 69 “important” vulnerabilities, according to Microsoft, and three that are of “moderate” severity.
By Tiago Pereira · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.