{"id":57333,"date":"2024-10-08T23:30:11","date_gmt":"2024-10-08T23:30:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-issues-117-patches-some-for-flaws-already-under-attack\/"},"modified":"2024-10-08T23:30:11","modified_gmt":"2024-10-08T23:30:11","slug":"microsoft-issues-117-patches-some-for-flaws-already-under-attack","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-issues-117-patches-some-for-flaws-already-under-attack\/","title":{"rendered":"Microsoft issues 117 patches \u2013 some for flaws already under attack"},"content":{"rendered":"

Patch Tuesday<\/span> It’s the second Tuesday of the month, which means Patch Tuesday, bringing with it fixes for numerous flaws, bugs and vulnerabilities in major software. And this one is a doozy.<\/p>\n

Microsoft has delivered 117 patches<\/a> \u2013 two of which are for vulnerabilities under active exploitation \u2013 and plenty of others that are sufficiently serious that they deserve your rapid attention.<\/p>\n

The most serious flaw already being exploited by malfeasants is CVE-2024-43572<\/a> \u2013 a 7.8-rated problem with Microsoft’s Management Console that would allow an unauthorized local attacker to run code on a machine using untrusted Microsoft Saved Console (MSC) files. Such files are essentially management utilities that can be accessed from the Microsoft Management Console. Running a bad MSC file could have nasty consequences.<\/p>\n