Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core
Summary: Microsoft's May Patch Tuesday disclosed 59 total CVEs, with only one rated critical: CVE-2024-30044, a remote code execution vulnerability in SharePoint Server that an authenticated attacker with Site Owner permissions or higher could exploit by uploading a crafted file and sending specialized API requests to trigger deserialization. Microsoft also disclosed a zero-day in the Windows DWM Core Library, CVE-2024-30051, which can grant SYSTEM-level privileges, has low attack complexity, and has already been exploited in the wild.
Bottom line: The one critical flaw requires only Site Owner permissions to reach remote code execution on a SharePoint Server, and the DWM Core zero-day granting SYSTEM privileges is already being exploited with low attack complexity.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-30044CVE-2024-30046CVE-2024-30051
- Related
- Patch Tuesday, May 2024 Edition Cyber Risks ·CVE-2024-30051: Microsoft DWM Core Library Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 14, 2024