{"id":57662,"date":"2024-11-13T01:29:13","date_gmt":"2024-11-13T01:29:13","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/admins-can-give-thanks-this-november-for-dollops-of-microsoft-patches\/"},"modified":"2024-11-13T01:29:13","modified_gmt":"2024-11-13T01:29:13","slug":"admins-can-give-thanks-this-november-for-dollops-of-microsoft-patches","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/admins-can-give-thanks-this-november-for-dollops-of-microsoft-patches\/","title":{"rendered":"Admins can give thanks this November for dollops of Microsoft patches"},"content":{"rendered":"

Patch Tuesday<\/span> Patch Tuesday has swung around again, and Microsoft has released fixes for 89 CVE-listed security flaws in its products \u2013 including two under active attack \u2013 and reissued three more.<\/p>\n

According to the IT giant, the first exploited flaw \u2013 CVE-2024-49039<\/a> \u2013 would allow privilege escalation thanks to an error in Windows Task Scheduler. Redmond warns that the CVSS 8.8-rated issue can be \u2013 and apparently has been \u2013 exploited using a low-privilege AppContainer. The upshot is that someone or something rogue on a vulnerable computer can use the bug to meddle with the box in a way they shouldn’t be able to.<\/p>\n

“An attacker must first gain access to the system, subsequently running a specifically crafted application to exploit the vulnerability,” explained Henry Smith, senior security engineer at Automox.<\/p>\n