Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days

As of late is Microsoft’s July 2024 Patch Tuesday, which includes security updates for 142 flaws, including two actively exploited and two publicly disclosed zero-days.

This Patch Tuesday mounted five principal vulnerabilities, with all being a ways flung code execution flaws.

This month’s Patch Tuesday fixes two actively exploited and two other publicly disclosed zero-day vulnerabilities.

Microsoft classifies a zero-day flaw as one which is publicly disclosed or actively exploited while no official repair is supplied.

Microsoft has mounted an actively exploited Hyper-V elevation of privileges vulnerability that affords attackers SYSTEM privileges.

“An attacker who efficiently exploited this vulnerability would possibly well salvage SYSTEM privileges,” explains Microsoft.

While Microsoft states that the flaw is actively exploited, it has no longer shared any longer principal parts about the vulnerability, including who chanced on it.

“Worthwhile exploitation of this vulnerability requires an attacker to rob extra actions before exploitation to put collectively the aim ambiance,” explains Microsoft.

“An attacker would get dangle of to send the victim a malicious file that the victim would get dangle of to assemble,” endured Microsoft.

Microsoft didn’t part any longer principal parts on how the vulnerability became once exploited.

Microsoft mounted a publicly disclosed .NET and Visual Studio RCE.

“An attacker would possibly well exploit this by closing an http/3 stream while the request physique is being processed ensuing in a lunge condition. This would possibly well outcome in a ways flung code execution,” explains Microsoft.

Microsoft has no longer shared the set aside it became once publicly disclosed and mentioned it became once internally chanced on by Radek Zikmund of Microsoft Corporation.

CVE-2024-37985 – Arm: CVE-2024-37985 Systematic Identification and Characterization of Proprietary Prefetchers

Microsoft has mounted a beforehand disclosed “FetchBench” side-channel assault that can even be frail to understand “secret data.”

“An attacker who efficiently exploited this vulnerability would possibly well stare heap memory from a privileged direction of working on the server,” explains Microsoft.

“Worthwhile exploitation of this vulnerability requires an attacker to rob extra actions before exploitation to put collectively the aim ambiance,” endured Microsoft.

Below is the complete checklist of resolved vulnerabilities within the July 2024 Patch Tuesday updates.

To access the paunchy description of every vulnerability and the programs it impacts, that you just would possibly well presumably also stare thepaunchy document right here.

Read More