{"id":55020,"date":"2024-01-10T04:26:06","date_gmt":"2024-01-10T04:26:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/new-year-new-updates-for-security-holes-in-windows-adobe-android-and-more\/"},"modified":"2024-01-10T04:26:06","modified_gmt":"2024-01-10T04:26:06","slug":"new-year-new-updates-for-security-holes-in-windows-adobe-android-and-more","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/new-year-new-updates-for-security-holes-in-windows-adobe-android-and-more\/","title":{"rendered":"New year, new updates for security holes in Windows, Adobe, Android and more"},"content":{"rendered":"

Patch Tuesday<\/span> Microsoft rang in the New Year with a relatively calm Patch Tuesday: Just 49 Windows security updates including fixes for two critical-rated bugs, plus four high-severity Chrome flaws in Microsoft Edge.<\/p>\n

None of the January CVEs are under active exploit, according to Redmond. Of the two critical vulnerabilities, CVE-2024-20674<\/a> received the highest CVSS severity rating. It’s a 9.0-out-of-10 rated security feature bypass bug in Windows Kerberos. <\/p>\n

“An unauthenticated attacker could exploit this vulnerability by establishing a machine-in-the-middle (MITM) attack or other local network spoofing technique, then sending a malicious Kerberos message to the client victim machine to spoof itself as the Kerberos authentication server,” Microsoft explained. <\/p>\n