Microsoft Patch Tuesday April 2024: 150 vulnerabilities fixed

Microsoft released the April 2024 Patch Tuesday, which brings fixes for 150 security vulnerabilities in its products.

The company rated only three vulnerabilities as critical, but there are 67 bugs that could allow remote code execution (RCE). More than half of the RCEs are in Microsoft SQL drivers. 26 Secure Boot bypass bugs were also fixed

See also: Microsoft: Opens new AI office in the UK

In the list below, you can see in detail the types of vulnerabilities that were fixed:

• 67 vulnerabilities that allow remote code execution
• 31 vulnerabilities that allow for elevation of privilege
• 29 vulnerabilities that allow bypassing security
• 13 vulnerabilities that allow information disclosure
• 7 vulnerabilities that allow Denial of Service attacks
• 3 vulnerabilities that allow spoofing

The 150 vulnerabilities fixed in Microsoft Patch Tuesday April 2024 do not include 5 Microsoft Edge fixed on April 4 and 2 Mariner bugs (a Linux distribution developed by Microsoft for Microsoft Azure services).

Fixing two zero-day vulnerabilities

April's Patch Tuesday fixed two zero-day vulnerabilities that were actively exploited in malware distribution attacks

Microsoft had not initially discovered the exploit, but Sophos and Trend Micro shared information about the attacks.

CVE-2024-26234: Proxy Driver Spoofing Vulnerability

According to Sophos, this vulnerability has been assigned to a malicious driver, signed with a valid Microsoft Hardware Publisher Certificate. The driver was used to deploy a backdoor previously disclosed by Stairwell.

See also: Microsoft fixes Outlook bug that displayed security alerts

CVE-2024-29988: SmartScreen Prompt Security Feature Bypass Vulnerability

CVE-2024-29988, fixed in this month's Microsoft Patch Tuesday, is a bypass patch for the CVE-2024-21412 bug (which is also a bypass patch for CVE-2023-36025), which allows attachments to bypass Microsoft Defender Smartscreen prompts when the file is opened. This vulnerability was used by the Water Hydra group to target forex trading forums and Telegram channels in spear phishing attacks that deployed the DarkMe remote access trojan (RAT).

Researchers from Varonis also uncovered two zero-day vulnerabilities in Microsoft SharePoint that make it difficult to detect file downloads from servers. Microsoft has not assigned CVEs to the two vulnerabilities, and they have been added to the patching backlog, with no timeline for when they will be fixed.

See also: US accuses Microsoft of inadequate cybersecurity

Microsoft Patch Tuesday April 2024: All vulnerabilities fixed

In the table below, you can see all the vulnerabilities being fixed this month:

Microsoft Patch Tuesday is a practice followed by Microsoft, where on the second Tuesday of each month it releases updates and fixes for its operating systems , programs, and applications. These updates typically include security fixes, performance improvements, and new features.

The purpose of Microsoft Patch Tuesday is to provide Microsoft users with the best possible user experience by fixing issues and ensuring the security of their systems. Microsoft Patch Tuesday is important for several reasons. First, security updates help protect systems from security vulnerabilities and malware. These updates fix known security issues and strengthen the resilience of systems against attacks.

Source: www.bleepingcomputer.com