Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-3775 | When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size | 7.1 | <1% | ||
| CVE-2023-40547 | A remote code execution vulnerability was found in Shim | 8.3 | 5% | ||
CVE-2024-38063+1 related CVE | Windows TCP/IP Remote Code Execution Vulnerability | 9.8 | 71% | ||
CVE-2024-38193+4 related CVEs | Use-After-Free Privilege Escalation in Microsoft Windows WinSock Driver (afd.sys) | 7.8 group max | 29% | KEVPoC | KEV |
| CVE-2024-38109 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network | 8.8 | 2% | ||
CVE-2024-38159+1 related CVE | Windows Network Virtualization Remote Code Execution Vulnerability | 9.1 | 2% | ||
| CVE-2024-38166 | An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by… | 6.1 | <1% | ||
| CVE-2024-38189 | Input-validation RCE in Microsoft Project via crafted project files | 8.8 | 8% | KEV | KEV |
| CVE-2024-38206 | An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network | 6.5 | 12% |
From the original article
3 min read at securityaffairs.com
Microsoft’s August 2024 Patch Tuesday addressed 90 vulnerabilities, including six that are actively exploited. Patch Tuesday security updates for August 2024 addressed 90 vulnerabilities in Microsoft products including Windows and Windows Components; Office and Office Components; .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.