Microsoft Patch Tuesday, November 2024 Edition
Summary: Microsoft released updates addressing at least 89 security holes in Windows and other software, including fixes for two zero-day vulnerabilities already being exploited and two other flaws disclosed publicly before today. The exploited zero-days are CVE-2024-49039, a Windows Task Scheduler privilege escalation reported by Google's Threat Analysis Group, and CVE-2024-43451, a spoofing flaw that could reveal Net-NTLMv2 authentication hashes.
Why it matters: CVE-2024-43451 is the third NTLM zero-day this year, and stolen NTLM hashes enable pass-the-hash attacks that let an attacker pose as a legitimate user without logging in or knowing the password. Separately, CVE-2024-43639 is a remote code execution flaw in Windows Kerberos, which one researcher called one of the most threatening CVEs in the release because a compromised domain can lead to the domain controller.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-43451CVE-2024-43498CVE-2024-43639CVE-2024-49019CVE-2024-49039CVE-2024-49040
- Related
- November Patch Tuesday release contains three critical remote code execution vulnerabilities Cyber Risks ·CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024