Today is Microsoft's March 2024 Patch Tuesday, and security updates have been released for 60 vulnerabilities, including eighteen remote code execution flaws.
This Patch Tuesday fixes only two critical vulnerabilities: Hyper-V remote code execution and denial of service flaws.
The number of bugs in each vulnerability category is listed below.
The total count of 60 flaws does not include 4 Microsoft Edge flaws fixed on March 7th. Furthermore, Microsoft did not disclose any zero-days as part of today's Patch Tuesday updates.
This month's Patch Tuesday does not fix any zero-day vulnerabilities but does include some interesting flaws, which we have listed below.
Microsoft has fixed a Office vulnerability allowing any authenticated user to gain SYSTEM privileges.
Microsoft has fixed a Microsoft Defender vulnerability that could.
Microsoft has fixed a remote code execution vulnerability Skype for Consumer that can be triggered by a malicious link or image.
Microsoft says this flaw was discovered by Hector Peralta and Nicole Armua working with Trend Micro Zero Day Initiative.
AnyCubic released new Kobra 2 firmware to fix a zero-day vulnerability exploited last month.
Apple released security updates to fix two iOS zero-days.
Cisco released security updates for multiple products.
Fortinet released security updates for FortiOS & FortiProxy.
Google released the Android March 2024 security updates.
Intel released an advisory on a new Register File Data Sampling microarchitectural vulnerability.
QNAP released security updates for an authentication bypass in QTS, QuTS hero, QuTScloud, and myQNAPcloud.
VMware released security updates to fix critical sandbox escape vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation.
Below is the complete list of resolved vulnerabilities in the March 2024 Patch Tuesday updates.
To access the full description of each vulnerability and the systems it affects, you can view the full report here.
Windows 11 KB5034765 update released with Start Menu fixes.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Tue, 12 Mar 2024 17:56:05 +0000