Microsoft Fixes Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-21412+1 related CVE | CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files | 8.1 group max | 99% | KEVRansomware | KEV |
| CVE-2024-21410 | Privilege Escalation via NTLM Relay Flaw in Microsoft Exchange Server | 9.8 | 13% | KEV | KEV |
| CVE-2024-21413 | Improper Input Validation RCE in Microsoft Outlook (MonikerLink) | 9.8 | 95% | KEVPoC | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has landed system administrators with a busy February after releasing updates for 73 vulnerabilities, including two zero-day flaws currently under active exploitation. February’s Patch Tuesday update round yesterday saw fixes for five critical vulnerabilities and 30 remote code execution (RCE) flaws. However, both zero-days were security feature bypass bugs.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.