Microsoft’s Patch Tuesday: Mild Mischief or Security Snafu?
Microsoft’s Patch Tuesday brings 72 fixes, with CVE-2024-49138 actively exploited, risking full system access. Meanwhile, Adobe’s patch haul includes 167 fixes, with 91 for Adobe Experience Manager alone. It’s a gift of vulnerability fixes, because nothing says festive like a security patch!
Hot Take:
Looks like Microsoft and Adobe are playing a game of cybersecurity whack-a-mole this month. Microsoft’s Patch Tuesday brought a manageable sack of 72 fixes, but Adobe decided to go full Grinch with 167 vulnerabilities. If only Adobe could patch the holes in our hearts with the same enthusiasm!
Key Points:
- Microsoft released 72 patches with only one high-severity vulnerability being actively exploited.
- Primary concern is CVE-2024-49138, an escalation of privilege bug in Windows Common Log File System Driver.
- Adobe is fixing 167 flaws, with the bulk of them in Adobe Experience Manager and Adobe Connect.
- Microsoft suggests workarounds for some vulnerabilities, like blocking inbound RPCs from untrusted networks.
- Adobe’s critical issues span across several products, including Illustrator, Substance 3D Painter, and Media Encoder.
Already a member? Log in here