Microsoft starts off new year with relatively light Patch Tuesday, no zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-20674+1 related CVE | Windows Kerberos Security Feature Bypass Vulnerability | 8.8 group max | 17% | ||
CVE-2024-20698+1 related CVE | Windows Kernel Elevation of Privilege Vulnerability | 7.8 group max | 9% | ||
| CVE-2024-21318 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 31% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft followed up one of the lightest recent Patch Tuesdays in December with another month of no zero-day vulnerabilities and only two critical issues. Many of the company’s monthly security updates in 2023 included vulnerabilities that were actively being exploited in the wild or had publicly available exploits already in circulation.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.