Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days

Right this moment time is Microsoft’s July 2024 Patch Tuesday, which incorporates safety updates for 142 flaws, including two actively exploited and two publicly disclosed zero-days.

This Patch Tuesday mounted 5 crucial vulnerabilities, with all being far away code execution flaws.

This month’s Patch Tuesday fixes two actively exploited and two other publicly disclosed zero-day vulnerabilities.

Microsoft classifies a zero-day flaw as one which is publicly disclosed or actively exploited whereas no legit fix is offered.

Microsoft has mounted an actively exploited Hyper-V elevation of privileges vulnerability that offers attackers SYSTEM privileges.

“An attacker who efficiently exploited this vulnerability could well kind SYSTEM privileges,” explains Microsoft.

While Microsoft states that the flaw is actively exploited, it has no longer shared any extra facts about the vulnerability, including who chanced on it.

“Successful exploitation of this vulnerability requires an attacker to plan conclude extra actions earlier than exploitation to prepare the target ambiance,” explains Microsoft.

“An attacker would should ship the sufferer a malicious file that the sufferer would should attain,” endured Microsoft.

Microsoft did no longer allotment any extra facts on how the vulnerability became exploited.

Microsoft mounted a publicly disclosed .NET and Visible Studio RCE.

“An attacker could well exploit this by closing an http/3 bolt whereas the inquire physique is being processed leading to a speed condition. This could well lead to far away code execution,” explains Microsoft.

Microsoft has no longer shared where it became publicly disclosed and said it became internally chanced on by Radek Zikmund of Microsoft Corporation.

CVE-2024-37985 – Arm: CVE-2024-37985 Systematic Identification and Characterization of Proprietary Prefetchers

Microsoft has mounted a beforehand disclosed “FetchBench” aspect-channel assault that could be ragged to steal “secret files.”

“An attacker who efficiently exploited this vulnerability could well glimpse heap memory from a privileged task running on the server,” explains Microsoft.

“Successful exploitation of this vulnerability requires an attacker to plan conclude extra actions earlier than exploitation to prepare the target ambiance,” endured Microsoft.

Below is your whole record of resolved vulnerabilities within the July 2024 Patch Tuesday updates.

To obtain admission to the plump description of each vulnerability and the systems it impacts, it’s essential to well glimpse theplump document right here.

Read More