Six 0-Days Lead Microsoft’s August 2024 Patch Push
Summary: Microsoft released updates fixing at least 90 security vulnerabilities in Windows and related software, including six zero-day flaws already being actively exploited. The zero-days include three local privilege escalation bugs (CVE-2024-38106, CVE-2024-38107, CVE-2024-38193) that grant SYSTEM-level access, a remote code execution flaw in Edge's Internet Explorer Mode (CVE-2024-38178), a Mark of the Web bypass (CVE-2024-38213), and a Microsoft Project RCE (CVE-2024-38189) that only affects users who disabled VBA macro notifications.
What's compelling: Six flaws were already being exploited before a patch existed, and one of them, CVE-2024-38106, carries a high attack-complexity rating that Trend Micro's ZeroDay Initiative says understates the risk because attacks are already in the wild. The Mark of the Web bypass matters most in combination with other flaws, since it lets malware disguise downloaded files as trusted before they arrive by email or compromised website.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2024-38106CVE-2024-38107CVE-2024-38178CVE-2024-38189CVE-2024-38193CVE-2024-38213
- Related
- CVE-2024-38189: Microsoft Project Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Aug 13, 2024