Today Microsoft released the March 2024 Patch Tuesday, which includes security updates for 60 vulnerabilities, including eighteen remote code execution (RCE) flaws.
See also: Microsoft: Patch Tuesday December 2023 released
With this Microsoft Patch Tuesday, only two critical vulnerabilities are fixed: Hyper-V remote code execution and denial of service flaws .
The number of bugs in each vulnerability category is listed below.
- 24 Elevation of Privilege Vulnerabilities
- 3 Security Features Bypass Vulnerabilities
- 18 Remote Code Execution Vulnerabilities
- 6 Information Disclosure Vulnerabilities
- 6 Denial of Service Vulnerabilities
- 2 Spoofing Vulnerabilities
The total number of 60 flaws does not include the 4 Microsoft Edge that were fixed on March 7.
Additionally, Microsoft did not disclose any zero-days during its Patch Tuesday updates.
See also: Microsoft Patch Tuesday January 2024: Fixes 49 vulnerabilities
This month's Patch Tuesday doesn't fix any zero-day vulnerabilities, but it does include a few interesting bugs, which we've listed below.
CVE-2024-26199 – Microsoft Office Elevation of Privilege Vulnerability
CVE-2024-20671 – Microsoft Defender Security Feature Bypass Vulnerability
CVE-2024-21411 – Skype for Consumer Remote Code Execution Vulnerability
See also: Microsoft: Patch Tuesday November 2023 released
Microsoft Patch Tuesday is a Microsoft policy for releasing security patches for its software. This policy began in 2003 and updates are released on the second Tuesday of each month, hence the name 'Patch Tuesday'. The updates provided during Patch Tuesday cover a wide range of Microsoft products, including Windows operating systems, Office, Exchange Server, Edge, and more. These updates are designed to fix vulnerabilities that could be exploited by malicious users.
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
