{"id":55319,"date":"2024-02-14T01:47:58","date_gmt":"2024-02-14T01:47:58","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/crims-found-and-exploited-these-two-microsoft-bugs-before-redmond-fixed-em\/"},"modified":"2024-02-14T01:47:58","modified_gmt":"2024-02-14T01:47:58","slug":"crims-found-and-exploited-these-two-microsoft-bugs-before-redmond-fixed-em","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/crims-found-and-exploited-these-two-microsoft-bugs-before-redmond-fixed-em\/","title":{"rendered":"Crims found and exploited these two Microsoft bugs before Redmond fixed ’em"},"content":{"rendered":"

Patch Tuesday<\/span> Microsoft fixed 73 security holes in this February’s Patch Tuesday, and you better get moving because two of the vulnerabilities are under active attack.<\/p>\n

Of the whole bundle five are rated critical and two others, rated important and moderate threats, are the pair being exploited in the wild.<\/p>\n

First up: CVE-2024-21412<\/a>, an internet shortcut file security feature bypass vulnerability that earned an 8.1-out-of-10 CVSS severity rating though Redmond only considers it important. After a user clicks on a maliciously crafted shortcut file on a vulnerable Windows machine, the file can start the next stage of an attack without causing security checks to appear on the screen.<\/p>\n