Microsoft Patch Tuesday
In today’s SensCy Cyber Brief, your SensCy team reviewed Microsoft’s latest series of patches released on Tuesday, October 8, 2024. This month Microsoft fixes 5 zero-days, all actively exploited, and 118 flaws.
What is Patch Tuesday?
Patch Tuesday is Microsoft’s initiative to release new security fixes for the Windows operating system and any other Microsoft software on a monthly basis. Your SensCy team will monitor such releases and provide you with our observations and recommendations.
Why is it important?
This month’s patch Tuesday is critical because it fixes critical vulnerabilities. The SensCy team recommends Microsoft users install those patches immediately.
Below are the 4 actively exploited zero-day vulnerabilities.
CVE-2024-43573 – Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43572 – Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-6197 – Open Source Curl Remote Code Execution Vulnerability
CVE-2024-20659 – Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2024-43583 – Winlogon Elevation of Privilege Vulnerability
In addition to the zero-day fixes, Microsoft is fixing 79 other vulnerabilities. Here is a breakdown of each vulnerability category:
- 43 Remote Code Execution Vulnerabilities
- 28 Elevation of Privilege Vulnerabilities
- 26 Denial of Service Vulnerabilities
- 7 Security Feature Bypass Vulnerabilities
- 7 Spoofing Vulnerabilities
- 6 Information Disclosure Vulnerabilities
For more information on vulnerabilities and the system that it affects, please refer to the full report from Microsoft linked here.
Instructions – Windows 10
Windows 10 users can install this update by going into Settings, clicking on Windows Update,
and manually performing a ‘Check for Updates.’
However, as this update is mandatory, it will automatically start installing in Windows once you check for updates. To make this more manageable, you can schedule a time when your computer is restarted to finish the installation.
To install today’s Windows 10 update, go to Start > Settings > Windows Update and click ‘Check for Updates’. You can also manually install this update from the Microsoft Update Catalog.
Instructions Windows 11
Windows 11 users can install this update by going into Settings, clicking on Windows Update, and manually performing a ‘Check for Updates.’
However, as this update is mandatory, it will automatically start installing in Windows once you check for updates. To make this more manageable, you can schedule a time when your computer is restarted to finish the installation.
To install today’s Windows 11 update, go to Start > Settings > Windows Update and click ‘Check for Updates’. You can also manually install this update from the Microsoft Update Catalog.
