Vulnerabilitycritical
Hackers have sights set on four Microsoft vulnerabilities, CISA warns
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-38014+1 related CVE | Local Privilege Escalation in Microsoft Windows Installer (Actively Exploited) | 7.8 group max | 6% | KEV | KEV |
| CVE-2024-38226 | Actively Exploited Security Feature Bypass in Microsoft Publisher | 7.3 | 3% | KEV | KEV |
| CVE-2024-43491 | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10… | 9.8 | 12% |
From the original article
3 min read at therecord.media
Federal civilian agencies across the U. S. government have until the end of the month to fix four key issues in Microsoft products after they were made public on Tuesday.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.