Patch Tuesday - November 2024

🗓️ 12 Nov 2024 22:42:12Reported by Adam BarnettType

Microsoft addresses 90 vulnerabilities on November 2024 Patch Tuesday, including zero-day EoP in Active Directory Certificate Services and NTLMv2 hash disclosure in MSHTML platform

Reporter	Title	Published	Views	Family All 1765
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component vulnerable to Microsoft LightGBM could allow a remote attacker to execute arbitrary code on the system.	14 Apr 202510:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in package openssl shipped with IBM CICS TX Advanced.	17 Feb 202515:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Google Chrome affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	17 Mar 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	19 Jun 202517:24	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535, CVE-2024-4603) due to OpenSSL	30 Jul 202422:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to lightgbm-4.5.0-py3-none-manylinux_2_28_x86_64.whl CVE-2024-43598	28 May 202514:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2024-5535]	28 Jan 202522:08	–	ibm

12 Nov 2024 22:42Current

10High risk

Vulners AI Score10

CVSS 3.19.9

EPSS0.84108

SSVC