Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-36025 | Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files | 8.8 | 88% | KEV | KEV |
| CVE-2023-38831 | Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion | 7.8 | 100% | KEVRansomwarePoC ×4 | KEV |
CVE-2023-47218+1 related CVE | An OS command injection vulnerability has been reported to affect several QNAP operating system versions | 8.3 group max | 90% | PoC | |
| CVE-2023-50387 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU… | 7.5 | 100% | ||
| CVE-2024-20684 | Windows Hyper-V Denial of Service Vulnerability | 6.5 | 1% | ||
CVE-2024-21412+1 related CVE | CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files | 8.1 group max | 99% | KEVRansomware | KEV |
| CVE-2024-21357 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 8.1 | 27% | ||
| CVE-2024-21380 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability | 8.0 | 2% | ||
| CVE-2024-21410 | Privilege Escalation via NTLM Relay Flaw in Microsoft Exchange Server | 9.8 | 13% | KEV | KEV |
| CVE-2024-21413 | Improper Input Validation RCE in Microsoft Outlook (MonikerLink) | 9.8 | 95% | KEVPoC | KEV |
From the original article
4 min read at thehackernews.com
Ravie Lakshmanan Feb 14, 2024 Patch Tuesday / Vulnerability Microsoft has released patches to address 73 security flaws spanning its software lineup as part of its Patch Tuesday updates for February 2024, including two zero-days that have come under active exploitation. Of the 73 vulnerabilities, 5 are rated Critical, 65 are rated Important, and three and rated Moderate in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.