FlagThis

References :

• www.cisa.gov: Microsoft Releases October 2024 Security Updates
• malware.news: Microsoft Releases October 2024 Security Updates
• www.cisa.gov: Microsoft Releases October 2024 Security Updates
• securityonline.info: Microsoft’s October 2024 Patch Tuesday: Zero-Day Exploits and Critical Vulnerabilities Patched
• malware.news: Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
• www.jpcert.or.jp: Security Alert: Microsoft Releases October 2024 Security Updates
• malware.news: This article discusses the October 2024 Patch Tuesday updates, highlighting the critical vulnerabilities addressed, including the two actively exploited zero-days. It also emphasizes the need for organizations to prioritize patching.
• socradar.io: SOCRadar article analyzing the vulnerabilities patched in Microsoft's October 2024 Patch Tuesday updates.
• malware.news: Actively exploited Microsoft Management Console bug fixed in October Patch Tuesday
• www.scworld.com: Actively exploited Microsoft Management Console bug fixed in October Patch Tuesday
• cyberscoop.com: Microsoft offers updates on 117 vulnerabilities on Patch Tuesday
• Arctic Wolf: Microsoft Patch Tuesday – October 2024: Critical and Exploited Vulnerabilities
• cysec.social: Microsoft October update patches two zero-day vulnerabilities it says are being actively exploited
• www.csoonline.com: Microsoft October update patches two zero-day vulnerabilities it says are being actively exploited
• Microsoft Security Blog: Microsoft's security blog post discusses the importance of patching systems against known vulnerabilities, including those addressed in the October security update.
• ciso2ciso.com: Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild – Source:thehackernews.com
• social.skynetcloud.site: Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild – Source:thehackernews.com
• www.helpnetsecurity.com: Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572) For October 2024 Patch Tuesday, Microsoft has released fixes for 117 security vulnerabilities, including two under active exploitation: CVE-2024-43573, a spoofing bug affecting the Windows MSHTML Platform, and CVE-2024-43572, a remote code execution flaw in the Microsoft Management Console (MMC). SOC teams are frustrated with their security tools Security operations … The post appeared first on .
• Alerts: CISA adds this vulnerability to its Known Exploited Vulnerabilities Catalog.

Classification:

• HashTags: #patchtuesday #microsoft #vulnerability
• Company: Microsoft
• Target: Windows systems
• Product: Windows, Windows Components, Office
• Type: Vulnerability
• Severity: Major