Microsoft released its March 2024 Patch Tuesday updates, addressing a total of 60 vulnerabilities, with 18 of them being remote code execution flaws. Among the critical vulnerabilities fixed in this release are issues related to Hyper-V remote code execution and denial of service. Notably, there were no zero-day vulnerabilities disclosed as part of this update.
Some of the key vulnerabilities addressed in this release include:
– CVE-2024-21400: A vulnerability in Microsoft Azure Kubernetes Service that could allow attackers to gain elevated privileges and steal credentials.
– CVE-2024-26199: An elevation of privilege vulnerability in Microsoft Office that could grant authenticated users SYSTEM privileges.
– CVE-2024-20671: A security feature bypass vulnerability in Microsoft Defender that could prevent the software from starting when exploited by an authenticated attacker.
– CVE-2024-21411: A remote code execution flaw in Skype for Consumer that could be triggered by a malicious link or image.
Other vendors also released updates or advisories in March 2024. For a comprehensive list of resolved vulnerabilities in the latest Patch Tuesday updates, refer to the full report.
Additionally, Microsoft introduced a single Teams app for Windows 11 that caters to both work and personal accounts. This update aims to streamline the user experience and enhance productivity.
Overall, the March 2024 Patch Tuesday updates from Microsoft address critical security issues across various products and services, emphasizing the importance of timely patching to mitigate potential risks.
