Microsoft Fixed 100+ Vulnerabilities With October Patch Tuesday

Microsoft has reached a significant milestone in addressing security vulnerabilities with the latest update bundle released during October 2024 Patch Tuesday. A total of 117 security vulnerabilities have been patched, including some that were publicly known and actively exploited.

Important Security Fixes With October Patch Tuesday From Microsoft

Among the most critical security fixes in this month’s update are two publicly known vulnerabilities and two actively exploited flaws. Despite not receiving high severity scores, these vulnerabilities have garnered attention due to their public disclosure, increasing the potential threat level. The vulnerabilities include:

• CVE-2024-43572 (important; CVSS 7.8): A publicly known remote code execution vulnerability in the Microsoft Management Console, actively exploited by tricking victims into loading a malicious MMC snap-in.
• CVE-2024-43573 (moderate; CVSS 6.5): Another publicly known and actively exploited spoofing vulnerability affecting the Windows MSHTML Platform.
• CVE-2024-20659 (important; CVSS 7.1): A security feature bypass in Windows Hyper-V that could allow compromising the Hypervisor and secure kernel.
• CVE-2024-43583 (important; CVSS 7.8): A publicly disclosed privilege escalation vulnerability in Winlogon.

Other Vulnerability Patches

In addition, the update bundle addressed three critical remote code execution vulnerabilities affecting Microsoft Configuration Manager, Remote Desktop Protocol Server, and Visual Studio Code extension for Arduino. Various other vulnerabilities across Microsoft products were also patched, ranging from denial of service to remote code execution flaws.

With a total of 117 vulnerability patches released, users are urged to update their systems promptly to mitigate potential security threats. Share your thoughts in the comments section.