Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-30001 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | 6.8 | <1% | ||
| CVE-2024-30044 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 7.2 | 84% | ||
| CVE-2024-30046 | Visual Studio Denial of Service Vulnerability | 5.9 | 2% | ||
| CVE-2024-30051 | Elevation of Privilege in Microsoft Windows DWM Core Library (Actively Exploited) | 7.8 | 6% | KEVRansomware | KEV |
From the original article
2 min read at blog.talosintelligence.com
After a relatively hefty Microsoft Patch Tuesday in April, this month’s security update from the company only included one critical vulnerability across its massive suite of products and services. In all, May’s slate of vulnerabilities disclosed by Microsoft included 59 total CVEs, most of which are considered to be of “important” severity. There is only one moderate-severity vulnerability.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.