Microsoft Patch Tuesday

In today’s SensCy Cyber Brief, your SensCy team reviewed Microsoft’s latest series of patches released on Tuesday, May 14, 2024. This month Microsoft fixes 9 zero-days, with 6 actively exploited, and 89 flaws.

What is Patch Tuesday?

Patch Tuesday is Microsoft’s initiative to release new security fixes for the Windows operating system and any other Microsoft software on a monthly basis. Your SensCy team will monitor such releases and provide you with our observations and recommendations.

Why is it important?

This month’s patch Tuesday is critical because it fixes critical vulnerabilities. The SensCy team recommends Microsoft users install those patches immediately.

This month’s patch Tuesday fixes 9 zero-day vulnerability, with 6 being actively exploited and four publicly disclosed.

Below are the 6 actively exploited vulnerabilities.

CVE-2024-38178 – Scripting Engine Memory Corruption Vulnerability;

CVE-2024-38193 – Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability;

CVE-2024-38213 – Windows Mark of the Web Security Feature Bypass Vulnerability;

CVE-2024-38106 – Windows Kernel Elevation of Privilege Vulnerability;

CVE-2024-38107 – Windows Power Dependency Coordinator Elevation of Privilege Vulnerability;

CVE-2024-38189 – Microsoft Project Remote Code Execution Vulnerability

In addition to the zero-day fixes, Microsoft is fixing 89 other vulnerabilities. Here is a breakdown of each vulnerability category:

  • 36 Elevation of Privilege Vulnerabilities
  • 28 Remote Code Execution Vulnerabilities
  • 8 Information Disclosure Vulnerabilities
  • 6 Denial of Service Vulnerabilities
  • 7 Spoofing Vulnerabilities
  • 4 Security Feature Bypass Vulnerabilities

For more information on vulnerabilities and the system that it affects, please refer to the full report from Microsoft linked here.

Microsoft Patch Tuesday (Instruction Windows 11)

To install today’s Windows 11 update, go to Start > Settings > Windows Update and click ‘Check for Updates’. You can also manually install this update from the Microsoft Update Catalog.

 

 

 

 

 

 

 

 

 

 

 

Microsoft Patch Tuesday (Instruction Windows 10)

Windows users can install this update by going into Settings, clicking on Windows Update, and manually performing a ‘Check for Updates.’

However, as this update is mandatory, it will automatically start installing in Windows once you check for updates. To make this more manageable, you can schedule a time when your computer is restarted to finish the installation.