Vulnerabilitycritical
Patch Tuesday, December 2024 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-49112 | Unauthenticated RCE in Microsoft Windows LDAP (CVE-2024-49112) | 9.8 | 71% | ||
| CVE-2024-49138 | Local Privilege Escalation via Heap Overflow in Microsoft Windows CLFS Driver | 7.8 | 26% | KEVPoC ×2 | KEV |
From the original article
2 min read at krebsonsecurity.comMicrosoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.