Microsoft Patch Tuesday May 2024: Fixes 3 zero-day vulnerabilities

Yesterday, Microsoft released its May Patch Tuesday updates , fixing over 60 vulnerabilities . Three of them were zero-days .

In terms of severity, only one vulnerability has been rated critical. It is located in Microsoft SharePoint Server and allows remote code execution.

In the list below you can see the categories of bugs fixed with this month's Microsoft Patch Tuesday:

• 27 vulnerabilities that allow remote code execution
• 17 vulnerabilities that allow for elevation of privilege
• 7 vulnerabilities that allow information disclosure
• 4 vulnerabilities that allow spoofing
• 3 vulnerabilities that allow Denial of Service attacks
• 2 vulnerabilities that allow bypassing security

These vulnerabilities do not include the two Microsoft Edge bugs fixed on May 2 and four fixed on May 10.

See also: Apple: Fixes zero-day vulnerability in older iPhones

Microsoft Patch Tuesday May 2024: Fixing three zero-day vulnerabilities

This month's Patch Tuesday fixes two zero-day vulnerabilities that have been used in attacks and one that has been publicly disclosed. Generally, Microsoft classifies a vulnerability as a zero-day when it is disclosed or actively exploited without an official patch.

The two vulnerabilities used in attacks:

CVE -2024-30040 : Windows MSHTML Security Feature Bypass Vulnerability

This vulnerability was used to bypass protection OLE, which was added to Microsoft 365 and Microsoft Office to protect users from vulnerable COM/OLE controls.

“An attacker would have to convince a user to upload a malicious file to a vulnerable system, typically via a phishing email or Instant Messenger message. They would then have to convince the user to manipulate the specially crafted file, but not necessarily to click or open the malicious file,” Microsoft explains.

See also: Serious vulnerabilities observed in Cinterion modems

"An unauthenticated attacker who successfully exploited this vulnerability could achieve code execution by convincing a user to open a malicious document"Microsoft continued.

CVE-2024-30051 – Windows DWM Core Library: Elevation of Privilege Vulnerability

The second zero-day vulnerability that Microsoft fixed with the May Patch Tuesday is located in the Windows DWM Core Library and provides SYSTEM privileges.

Kaspersky states that recent phishing attacks distributing the Qakbot malwareused malicious documents to exploit the flaw and gain SYSTEM privileges on Windows devices.

Microsoft states that CVE-2024-30051 was also publicly disclosed, but it is unclear where this happened.

CVE-2024-30046 – Microsoft Visual Studio: Vulnerability allowing denial of service attacks

The latest zero-day vulnerability to be patched is CVE-2024-30046, which can be used to launch denial of service attacks. According to Microsoft, this vulnerability was classified as a zero-day because it was publicly disclosed before Patch Tuesday was released.

See also: Vulnerabilities revealed in Xiaomi Android devices

Microsoft Patch Tuesday May 2024: All vulnerabilities

In the table below, you can see in detail all the vulnerabilities that are being fixed this month:

Microsoft Patch Tuesday is a practice followed by Microsoft, where on the second Tuesday of each month, it releases updates and fixes for its operating systems , programs, and applications. These updates typically include security fixes, performance improvements, and new features.

The purpose of Microsoft Patch Tuesday May is to provide Microsoft users with the best possible user experience by fixing issues and ensuring the security of their systems. Security updates help protect systems from security and malware. These updates fix known security issues and strengthen the resilience of systems against attacks.

Source: www.bleepingcomputer.com