Microsoft Patch Tuesday, July 2024 Edition

Summary: Microsoft released updates addressing at least 139 security vulnerabilities across Windows and other products, with attackers already exploiting two zero-days: CVE-2024-38080, a Hyper-V privilege escalation affecting Windows 11 and Windows Server 2022, and CVE-2024-38112, an MSHTML flaw affecting hosts from Windows Server 2008 R2 onward. Three Windows Remote Desktop vulnerabilities (CVE-2024-38077, CVE-2024-38074, CVE-2024-38076) carry CVSS scores of 9.8, and July 9 also marked the end of support for SQL Server 2014, which Shodan shows still has roughly 110,000 public instances.
What's compelling: Two flaws are under active exploitation and three Remote Desktop bugs score 9.8 out of 10, while roughly 110,000 SQL Server 2014 instances just lost vendor support - and more than a quarter of this month's fixes are in SQL Server.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-23397 CVE-2024-38021 CVE-2024-38053 CVE-2024-38074 CVE-2024-38076 CVE-2024-38077 CVE-2024-38080 CVE-2024-38112
Related: Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities Cyber Risks ·
CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability Known Exploited Vulnerabilities · Jul 09, 2024
CVE-2024-38080: Microsoft Windows Hyper-V Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jul 09, 2024