April’s Patch Tuesday Brings Record Number of Fixes
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20670 | Outlook for Windows Spoofing Vulnerability | 8.1 | 2% | ||
| CVE-2024-21412 | CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files | 8.1 | 99% | KEVRansomware | KEV |
| CVE-2024-26234 | Proxy Driver Spoofing Vulnerability | 6.7 | 5% | ||
| CVE-2024-29063 | Azure AI Search Information Disclosure Vulnerability | 5.5 | <1% | ||
| CVE-2024-29988 | Mark of the Web Security Feature Bypass in Microsoft SmartScreen Prompt | 8.8 | 45% | KEV | KEV |
From the original article
4 min read at krebsonsecurity.comIf only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this month’s patch batch — a record 147 flaws in Windows and related software. Yes, you read that right.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.