Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

June 12, 2024 at 12:57AM

Microsoft released 51 security updates in its Patch Tuesday for June 2024, addressing 51 vulnerabilities, with one Critical and 50 Important. No active exploits were reported, with a third-party advisory CVE-2023-50868 posing a denial-of-service issue. Various other RCE vulnerabilities were also resolved, affecting different Microsoft products. Other vendors have also released security updates.

From the meeting notes, I have gathered the following key takeaways:

– Microsoft has released security updates to address 51 flaws as part of its Patch Tuesday updates for June 2024.
– There is one Critical vulnerability and 50 Important vulnerabilities addressed in the update.
– None of the security flaws have been actively exploited in the wild.
– A denial-of-service issue impacting the DNSSEC validation process, tracked as CVE-2023-50868, has been reported.
– The most severe of the flaws fixed in this month’s update is a critical remote code execution (RCE) flaw in the Microsoft Message Queuing (MSMQ) service, tracked as CVE-2024-30080.
– Other RCE bugs and privilege escalation flaws in various Microsoft products have also been resolved.
– Cybersecurity firm Morphisec discovered a vulnerability (CVE-2024-30103) in Microsoft Outlook that could be used to trigger code execution without user interaction.
– Security updates have also been released by other vendors to rectify several vulnerabilities.

Please let me know if you need any further details or if there is anything else you would like to be summarized from the meeting notes.

Full Article