Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server 

Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server 

March 12, 2024 at 03:51PM

Microsoft rolled out patches for 60 security vulnerabilities in Windows, including critical flaws in HyperV and Open Management Infrastructure. Other fixes cover issues in Microsoft Excel and Azure Kubernetes, and Adobe also released patches for critical-severity vulnerabilities in several enterprise products. Both companies reported no active exploits for the addressed issues.

From the provided meeting notes, the following key takeaways can be generated:

– Microsoft released patches for at least 60 security vulnerabilities in the Windows ecosystem, including critical-severity vulnerabilities in HyperV and Open Management Infrastructure (OMI).
– The patches address remote code execution and denial-of-service attacks, and users are urged to prioritize the fixes for HyperV vulnerabilities CVE-2024-21407 and CVE-2024-21408.
– Vulnerabilities in Microsoft Excel and Microsoft Azure Kubernetes were also covered in the updates, addressing code execution issues and the risk of stealing credentials and affecting resources beyond the security scope managed by Azure Kubernetes Service Confidential Containers (AKSCC).
– It was emphasized that none of the documented issues have been publicly discussed or under active attack.
– Adobe also released security updates to fix critical-severity vulnerabilities in enterprise-facing products such as Adobe ColdFusion, Adobe Premiere Pro, Adobe Bridge, and Adobe Lightroom. Similarly, no exploits in the wild for these issues were reported.

The meeting notes also mention other security-related news, such as Google’s bug bounty payouts and security patches from Cisco. These are important industry updates and demonstrate the ongoing efforts to address security vulnerabilities.

Full Article