First Microsoft Patch Tuesday zero-day of 2024 disclosed as part of group of 75 vulnerabilities
Summary: Microsoft's February 2024 security update covers 75 vulnerabilities, three rated critical and 69 rated important, including CVE-2024-21351, a Windows SmartScreen security feature bypass that is being actively exploited in the wild. The critical flaws include CVE-2024-20684, a Hyper-V guest-to-host denial-of-service issue, CVE-2024-21357, a remote code execution flaw in Windows Pragmatic General Multicast, and CVE-2024-21380, an information disclosure vulnerability in Microsoft Dynamics Business Central/NAV.
Why it matters: The one flaw being exploited in the wild is rated only moderate: CVE-2024-21351 lets a user be tricked into downloading and running a file without the usual SmartScreen protections, so severity ratings alone will not tell you what is under attack.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-20684CVE-2024-21351CVE-2024-21357CVE-2024-21378CVE-2024-21379CVE-2024-21380
- Related
- CVE-2024-21351: Microsoft Windows Smart Screen Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · Feb 13, 2024Fat Patch Tuesday, February 2024 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026