Patch Panic: 92 Vulnerabilities, 9 Critical, 9 Zero-Days Already Exploited!
This month’s patch extravaganza covers 92 vulnerabilities, including 9 critical and 9 zero-days, with a VIP pass to CVE-2024-38189. Watch out for your macros and IPv6 settings, folks, or risk a wild ride in the Exploit Canyon!
Hot Take:
It’s patch day, folks! Time to play everyone’s favorite game: “Whack-a-Vuln!” With 92 vulnerabilities to tackle, it looks like your IT department won’t be seeing daylight anytime soon. Grab your coffee; it’s gonna be a long one!
Key Points:
- 92 vulnerabilities patched this month, including 9 critical and 9 zero-days.
- Microsoft Project’s RCE vulnerability (CVE-2024-38189) leads the pack with a CVSS score of 8.8.
- Two vulnerabilities have a whopping CVSS score of 9.8: Windows RMCAST RCE (CVE-2024-38140) and Windows TCP/IP RCE (CVE-2024-38063).
- Zero-days in the wild include CVE-2024-38178, CVE-2024-38193, and CVE-2024-38106 among others.
- Critical vulnerabilities not being exploited yet: Windows RMCAST RCE (CVE-2024-38140) and Windows TCP/IP RCE (CVE-2024-38063).
Already a member? Log in here