Microsoft & Adobe August 2024 Patch Tuesday Updates | Qualys

Summary: Microsoft's August 2024 Patch Tuesday addressed 102 vulnerabilities, including nine critical and 77 important, among them six actively exploited flaws and three publicly disclosed zero-days (CVE-2024-21302, CVE-2024-38202, CVE-2024-38199), with a tenth zero-day (CVE-2024-38200) left unpatched. Adobe released 11 advisories covering 72 vulnerabilities across Illustrator, Photoshop, Acrobat and Reader, Commerce and other products, 35 of them rated critical.
Bottom line: CISA added six of the Microsoft flaws to its Known Exploited Vulnerabilities Catalog and set a September 3, 2024 patch deadline, and several of them - in the Windows kernel, the Ancillary Function Driver for WinSock, and the Power Dependency Coordinator - yield SYSTEM privileges when exploited.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-21302 CVE-2024-38106 CVE-2024-38178 CVE-2024-38193 CVE-2024-38199 CVE-2024-38200 CVE-2024-38202 CVE-2024-38213
Related: Six 0-Days Lead Microsoft’s August 2024 Patch Push Cyber Risks ·
CVE-2024-38178: Microsoft Windows Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Aug 13, 2024
CVE-2024-38213: Microsoft Windows Smart Screen Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · Aug 13, 2024