Patch Tuesday, May 2024 Edition
Summary: Microsoft released updates fixing more than 60 security holes in Windows and supported software, including two zero-day vulnerabilities already exploited in active attacks: CVE-2024-30051, an elevation-of-privilege bug in a core Windows library, and CVE-2024-30040, a security feature bypass in MSHTML. Kaspersky reported exploitation of CVE-2024-30051 and said it has seen the exploit used with QakBot and other malware, while Google also patched a Chrome zero-day and Apple shipped macOS Sonoma 14.5 with nearly two dozen security patches.
Bottom line: One of the two Windows zero-days requires only that a target open a specially crafted document, and it has already been observed alongside QakBot, a strain now used by multiple cybercriminal groups to prepare compromised networks for ransomware.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-30040CVE-2024-30044CVE-2024-30051
- Related
- Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core Cyber Risks ·CVE-2024-30051: Microsoft DWM Core Library Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 14, 2024CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · May 14, 2024