November 2024 Patch Tuesday Updates for Microsoft & Adobe | Qualys
Summary: Microsoft's November 2024 Patch Tuesday addressed 92 vulnerabilities, including four critical and 83 important severity issues, plus one Defense in Depth update for SharePoint Server. Four zero-day vulnerabilities were fixed, two of which - CVE-2024-49039 and CVE-2024-43451 - are known to be exploited in the wild, while Adobe released eight advisories covering 48 vulnerabilities, 28 rated critical.
What you should know: Two of the fixed flaws are already being exploited, and CISA has ordered federal agencies to patch one of them by December 3, 2024 - a deadline that puts a hard clock on every organization running affected Microsoft products.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-43451CVE-2024-49039
- Related
- Microsoft Patch Tuesday, November 2024 Edition Cyber Risks ·CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024