Microsoft Released a Patch for the Exploited Windows Security Vulnerability
Microsoft's latest Tuesday Update fixes 71 security vulnerabilities in Windows, including a zero-day vulnerability that is being exploited in cyber attacks.
Security Updates from Microsoft
Microsoft released a series of patches addressing more than 70 documented security vulnerabilities on Tuesday. The Redmond-based technology giant has highlighted the need for special attention to a zero-day vulnerability already in use within the Windows Common Log File System (CLFS).
This specific security vulnerability (CVE-2024-49138) has been marked as actively exploited and was reported by CrowdStrike with a severity rating of 7.8 out of 10. This flaw allows an attacker to gain SYSTEM privileges through a stack-based buffer overflow. Microsoft warned that a successful exploit does not require user interaction and requires only a few privileges to execute.
In addition, Microsoft fixed 16 critical security vulnerabilities in various components of the Windows operating system and is encouraging administrators to prioritize the remote code execution flaw in Windows LDAP (CVE-2024-49112), which has a severity rating of 9.8 out of 10.