Patch Tuesday
40
"It’s notable that the exploit first uses the NtQuerySystemInformation API to leak kernel addresses to user mode."
Windows Server 16 is affected. Get patching…
Lighter than last month, mercifully, but still some urgent fixes.
"Exploitation leads to SYSTEM privileges, and if this all sounds familiar, it should..."
Redmond pushes fixes for 117 vulnerabilities, three rated critical, five as publicly known , and eight marked as “exploitation more likely.” Beyond Microsoft, there are...
Remote code execution bug is confusingly described as having been exploited in the wild, even though it is not believed to have left Microsoft's lab.
CVE-2024-38063 lets unauthenticated attackers carry out remote code execution by "repeatedly sending IPv6 packets".