Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43468 | Unauthenticated SQL Injection to RCE in Microsoft Configuration Manager | 9.8 | 81% | KEV | KEV |
| CVE-2024-43488 | Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution… | 9.8 | 1% | ||
CVE-2024-43582+3 related CVEs | Remote Desktop Protocol Server Remote Code Execution Vulnerability | 8.1 group max | 3% | ||
CVE-2024-43560+3 related CVEs | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | 7.8 | 4% | ||
CVE-2024-43573+1 related CVE | Spoofing Vulnerability in Microsoft Windows MSHTML Platform Exploited in the Wild | 8.1 group max | 46% | KEV | KEV |
| CVE-2024-43609 | Microsoft Office Spoofing Vulnerability | 6.5 | 2% |
From the original article
3 min read at blog.talosintelligence.com
The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company’s range of hardware and software offerings. October’s monthly security update from Microsoft includes fixes for 117 CVEs, the most in a month since July’s updates covered 142 vulnerabilities .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.