June’s Cyber Siesta: Microsoft Patches Just Two Zero-Day Threats!
In a twist of irony, June’s quiet month for sysadmins features two zero-day vulnerabilities, including CVE-2024-33053, an RCE bug with a CVSS score of 8.8. While WebDav isn’t enabled by default, it’s the legacy systems’ current favorite party crasher, and sysadmins should RSVP immediately with a patch.
Hot Take:
June’s patch notes: sysadmins, take a breather and maybe a beach day because Microsoft’s update list is lighter than a feather pillow in a gravity-free zone! But don’t get too comfy – those pesky zero-days are like mosquitoes at a picnic, always finding a way to bug you!
Key Points:
- June’s Patch Tuesday is relatively quiet with only two zero-day vulnerabilities addressed.
- The critical zero-day, CVE-2024-33053, is a remote code execution bug in WebDAV with a CVSS score of 8.8.
- WebDAV vulnerability allows malicious file uploads and execution through misconfigured systems.
- The second zero-day, CVE-2025-33073, is an elevation of privilege flaw in the Windows SMB client.
- Overall, 66 CVEs were fixed, including 10 RCE bugs, making this one of the lightest update rounds.
Already a member? Log in here