Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-43582+1 related CVE | Remote Desktop Protocol Server Remote Code Execution Vulnerability | 8.1 group max | 3% | ||
| CVE-2024-38112 | Windows MSHTML Platform Spoofing Vulnerability Exploited in the Wild (CVE-2024-38112) | 7.5 | 84% | KEV | KEV |
| CVE-2024-43461 | Windows MSHTML Platform Spoofing Vulnerability Exploited as Zero-Day (CVE-2024-43461) | 8.8 | 54% | KEV | KEV |
| CVE-2024-43468 | Unauthenticated SQL Injection to RCE in Microsoft Configuration Manager | 9.8 | 81% | KEV | KEV |
| CVE-2024-43488 | Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution… | 9.8 | 1% | ||
CVE-2024-43573+1 related CVE | Spoofing Vulnerability in Microsoft Windows MSHTML Platform Exploited in the Wild | 8.1 group max | 46% | KEV | KEV |
| CVE-2024-43583 | Winlogon Elevation of Privilege Vulnerability | 7.8 | 1% | ||
| CVE-2024-6197 | libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string | 7.5 | 4% | PoC |
From the original article
3 min read at thehackernews.com
Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.