Forest Global Training Partners

Cyber Risks · Cisco Talos

November Patch Tuesday release contains three critical remote code execution vulnerabilities

Summary: Microsoft's November 2024 Patch Tuesday release covers 89 vulnerabilities, four of them rated "critical," including remote code execution flaws in Windows Kerberos (CVE-2024-43639), Azure CycleCloud (CVE-2024-43602) and .NET and Visual Studio (CVE-2024-43498), plus a privilege escalation flaw in a Hyper-V VMSwitch driver (CVE-2024-43625). Microsoft assessed exploitation of all four critical flaws as "less likely" and reported no in-the-wild exploitation of any of them, while some "important" updates were listed as "exploitation more likely" and others had exploitation detected by Microsoft.

Bottom line: The four flaws Microsoft rated critical are the ones it says attackers are least likely to use, while the updates where exploitation has actually been detected sit in the "important" tier - so a patch queue sorted by severity rating alone would deprioritize the vulnerabilities already being used.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2024-43498CVE-2024-43602CVE-2024-43625CVE-2024-43639
Related