Vulnerabilitycritical
Single RCE Bug Features Among 60 CVEs in March Patch Tuesday
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20671 | Microsoft Defender Security Feature Bypass Vulnerability | 5.5 | <1% | ||
CVE-2024-21407+2 related CVEs | Windows Hyper-V Remote Code Execution Vulnerability | 8.1 group max | 16% | ||
| CVE-2024-26185 | Windows Compressed Folder Tampering Vulnerability | 6.5 | 30% |
From the original article
2 min read at infosecurity-magazine.com
Microsoft fixed 60 vulnerabilities in this month’s Patch Tuesday security update round, including just two critical bugs. These both affect Windows Hyper-V. CVE-2024-21407 enables attackers to escape from a Hyper-V guest virtual machine (VM) and achieve remote code execution (RCE) on the Hyper-V host, according to Rapid7 lead software engineer, Adam Barnett.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.